As Nic noted, yesterday BSI published BS10012 Data protection - Specification for a personal information management system. Here are some more details from BSI.

The new standard is aimed at providing organisations with a framework to enable the effective management of personal data, and will allow them to establish a personal information management system (PIMS). A PIMS will provide an infrastructure for maintaining and improving compliance with data protection legislation and good practice. This is the first time a British Standard has been produced for the management of personal information and it is designed for use by organisations of any size and sector, by those responsible for initiating, implementing and maintaining a PIMS.

BS 10012 is now available from the BSI Shop in hardcopy or downloadable PDF format. For further information or to place an order, please visit www.bsigroup.com/bs10012, or contact the BSI Customer Services Team on +44 (0)20 8996 9001 or [log in to unmask]

Susan Healy
Information Policy Consultant and Data Protection Officer
The National Archives
Tel 020 8392 5330 ext 2305
Email [log in to unmask]
www.nationalarchives.gov.uk

From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of DREW Nic
Sent: 03 June 2009 08:16
To: [log in to unmask]
Subject: [data-protection] New BS 10012 in DP

From 'Out-Law.Com'

"Another guide to data protection compliance was launched today. British Standard BS 10012, Data protection – Specification for a personal information management system has been developed to establish best practice and aid compliance with data protection legislation. It is the first standard from BSI for the management of personal information. OUT-LAW will report on BS 10012 shortly."

Nic Drew

Trust Data Protection Officer

Cardiff and Vale NHS Trust

This message is strictly confidential and intended for the person or organisation to whom it is addressed. If you are not the intended recipient of the message then please notify the sender immediately. Any of the statements or comments made above should be regarded as personal and not necessarily those of Cardiff & Vale NHS Trust, any constituent part or connected body.

All e-mail sent to or from this address will be processed by Cardiff & Vale NHS Trust's Corporate e-mail system and may be subject to scrutiny by someone other than the addressee.

Please be aware that, under the terms of the Freedom of Information Act 2000, Cardiff & Vale NHS Trust may be required to make public the content of any emails or correspondence received. For further information on >Freedom of Information or email monitoring, please refer to the Cardiff & Vale NHS Trust website at www.cardiffandvale.wales.nhs.uk .

Mae'r neges hon yn gyfrinachol. Os nad chi w'r derbynnydd y bwriedid y neges ar ei gyfer, byddwch mor garedig ÿ rhoi gwybod i'r anfonydd yn ddi-oed. Dylid ystyried unrhyw ddatganiadau neu sylwadau a wneir uchod yn rhai personol, ac nid o angenrhaid yn rhai o eiddo Ymddiriedolaeth GIG Caerdydd a'r Fro, nac unrhyw ran gyfansoddol ohoni na chorff cysylltiedig.

Caiff pob e-bost a anfonir oÿr cyfeiriad hwn ei brosesu gan system e-bost Gorfforaethol Ymddiriedolaeth GIG Caerdydd a'r Fro, a gallai gael ei archwilio gan rai ac eithrio'r sawl a anfonodd y neges.

Cofiwch fod yn ymwybodol ei bod yn bosibl y bydd disgwyl i Ymddiriedolaeth GIG Caerdydd a'r Fro roi cyhoeddusrwydd i gynnwys unrhyw ebost neu ohebiaeth a dderbynnir, yn unol ag amodau'r Ddeddf Rhyddid Gwybodaeth 2000. I gael mwy o wybodaeth am Ryddid Gwybodaeth neu fonitro e-byst, cofiwch gyfeirio at wefan Ymddiriedolaeth GIG Caerdydd a'r Fro ar www.cardiffandvale.wales.nhs.uk .

This email was received from the INTERNET and scanned by the Government Secure Intranet anti-virus service supplied by Cable&Wireless in partnership with MessageLabs. (CCTM Certificate Number 2007/11/0032.) In case of problems, please call your organisation’s IT Helpdesk.
Communications via the GSi may be automatically logged, monitored and/or recorded for legal purposes.

All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html

Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):

Leaving this list: send leave data-protection to [log in to unmask]
Suspending emails from all JISCMail lists: send SET * NOMAIL to [log in to unmask]
To receive emails from this list in text format: send SET data-protection NOHTML to [log in to unmask]
To receive emails from this list in HTML format: send SET data-protection HTML to [log in to unmask]

All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]

Any queries about sending or receiving messages please send to the list owner [log in to unmask]

(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)