Any demo I've seen has involved dummy data. I'd be suspicious!

Best wishes

Susan Healy

"Baines, Jonathan" <[log in to unmask]> wrote:

I would suggest that if software vendors can't demonstrate without using live data it might indicate something about the quality of their offering.




On 6 Aug 2014, at 08:24, "Jane Holden" <[log in to unmask]> wrote:

Hello

 

I agree with Tim.

 

We’ve had the same scenario here and we’ve said no to the use of the data.  They’ve always found an alternative was of demonstrating!  If they want to sell their product badly enough they will find a way.

 

Thank you

 

Jane

 

From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of Tim Turner
Sent: 05 August 2014 22:12
To: [log in to unmask]
Subject: Re: [data-protection] Use of Personal Data for Product Demonstrations

 

Hi Amy

 

You’re right. Public authority would have to ensure that the vendor was covered by a contract that satisfied the Data Processor provisions of Principle 7. It would automatically be a breach of principle 7 without a contract ticking the various boxes.

 

I would also suggest that supplying a third party of any kind with a large amount of personal data merely for the purposes of a demonstration might well be unfair in terms of the first principle. Would the people concerned be aware that their data will be used for this purpose? Under the second principle, is this a compatible re-use of their data? Under the third principle, is this excessive?

 

I’m a bit sceptical about the whole thing, to be honest.

 

Best wishes

 

Tim Turner

 

 

On 5 August 2014 at 22:03:49, Amy Jaines ([log in to unmask]) wrote:

Hello,

 

I would appreciate any thoughts that the list may have on the following scenario.

 

The scenario is as follows:

 

Public authority has been approached by a third party in relation to a product they offer. Public authority is interested in the product and would like a demonstration. Third party state that in order to provide a demonstration they will need access to a large amount of historical personal data held by the authority to run through their system. Third party has offered a ‘Mutual Confidentiality Agreement’ but this does not mention DPA obligations.

 

Public authority, as far as I understand, remains data controller for the data as in these circumstances they have determined the purpose for which the data is to be processed and the third party is merely offering a product that will achieve that purpose, thereby third party is a data processor.

 

My view is that even for the purposes of a demonstration, if personal data is going to be passed to the third party a contractual arrangement must be in place that satisfies the requirements of Principle 7 although am happy to receive any views to the contrary if I am mistaken.

 

Many thanks in advance.

 

Kind regards,

 

Amy Jaines

 

Note: We are a Microsoft Office site. Our base version is 2010. Please make sure that files you send can be read in this format. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail is strictly prohibited save unless expressly authorised by the sender. The information contained in this message is intended for the named recipients only. It may contain privileged and confidential information and if you are not the addressee or the person responsible for delivering this to the addressee, you may not copy, distribute or take action in reliance on it. If you have received this message in error, please notify the sender(s) immediately by telephone. Please also destroy and delete as soon as possible the message from your computer. ********************************************************************************* *********************************************************************************

All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html

Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):

All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]

Any queries about sending or receiving messages please send to the list owner [log in to unmask]

(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)

Tim Turner

12 Honeysuckle Close

Manchester

M23 9EZ

All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html

Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):

All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]

Any queries about sending or receiving messages please send to the list owner [log in to unmask]

(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)

All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html

Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):

All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]

Any queries about sending or receiving messages please send to the list owner [log in to unmask]

(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)
http://www.mythical-maze.org.uk

FacebookLike Us Follow UsFollow Us Watch UsWatch Us


LGC Awards WinnerInvestors In People
Buckinghamshire County Council

Visit our Web Site : http://www.buckscc.gov.uk

Buckinghamshire County Council Email Disclaimer

This Email, and any attachments, may contain Protected or Restricted information and is intended solely for the individual to whom it is addressed. It may contain sensitive or protectively marked material and should be handled accordingly. If this Email has been misdirected, please notify the author or [log in to unmask]immediately. If you are not the intended recipient you must not disclose, distribute, copy, print or rely on any of the information contained in it or attached, and all copies must be deleted immediately. Whilst we take reasonable steps to try to identify any software viruses, any attachments to this Email may nevertheless contain viruses which our anti-virus software has failed to identify. You should therefore carry out your own anti-virus checks before opening any documents.

Buckinghamshire County Council will not accept any liability for damage caused by computer viruses emanating from any attachment or other document supplied with this email.

All GCSx traffic may be subject to recording and / or monitoring in accordance with relevant legislation.

The views expressed in this email are not necessarily those of Buckinghamshire County Council unless explicitly stated.

This footnote also confirms that this email has been swept for content and for the presence of computer viruses.

All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html

Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):

All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm and are sent in the body of an otherwise blank email to [log in to unmask]

Any queries about sending or receiving messages please send to the list owner [log in to unmask]

(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)