 |
 |
One of her colleagues who knows the act better can provide details but is away until Thursday. Let me know if you want me to find out – or just throw that back at your data protection person as they will know about it instantly(?!)
When I checked with our previous data protection person (now with EH), she said there were no issues with the HER but that we shouldn’t publish people’s details (ie no addresses on the website).
Chris Webster
Somerset Historic Environment Record
Somerset Heritage Centre
Brunel Way
Taunton
TA2 6SF
01823 347434
Online HER at www.somerset.gov.uk/her
From: Issues related to Historic Environment Records [mailto:[log in to unmask]] On Behalf Of Nick Boldrini
Sent: 08 September 2014 16:34
To: [log in to unmask]
Subject: Data Protection and Record Retention
Hey up HEROs
Sometimes I shouldn’t learn to bite my tongue, because when I don’t I end up with an open can of worms, and mixed metaphors.
So, as part of our HER Audit Action Plan, we have been trying to work out how to make sure the HER is Data Protection Compliant.
This relates to information we have about individuals acting solely as private individuals which is the source of a digital record in the HER, and forms part of the HER Collections. So, for example the letter from Mrs Miggins who found a DMV whilst walking her dog, or the letter (it’s usually letters) from John Doe about the handaxe he found whilst digging his allotment etc etc.
And I made the mistake of asking our Corporate Data Protection guru about it.
His comeback is broadly speaking that we shouldn’t keep information that makes the individual identifiable for longer than 6 years. He also said there might be exceptions, and that we need to be pragmatic. He also said we should probably have a Privacy notice we point at when people give us information.
I am less interested in going through and discussing his suggestions point by point than finding out if anyone else has gone down this route - of trying to see if their HER is data Protection Complaint - and what you came up with?
If you haven’t started this – don’t! Delete this email now and eat the computer you read it on!
Durham County Council cannot be held responsible for any internal bleeding that results from following that suggestion… ; )
Thanks in advance
best wishes
Nick Boldrini
Historic Environment Record Officer
Archaeology Section
Design and Historic Environment Team
Planning Service
Regeneration and Economic Development
Durham County Council
County Hall
Durham
DH1 5UQ
Tel: 03000 267008
Help protect our environment by only printing this email if absolutely necessary. The information it contains and any files transmitted with it are confidential and are only intended for the person or organisation to whom it is addressed. It may be unlawful for you to use, share or copy the information, if you are not authorised to do so. If you receive this email by mistake, please inform the person who sent it at the above address and then delete the email from your system. Durham County Council takes reasonable precautions to ensure that its emails are virus free. However, we do not accept responsibility for any losses incurred as a result of viruses we might transmit and recommend that you should use your own virus checking procedures.
This email, and any attachments is intended solely for the individual to whom it is addressed. It may contain personal and / or sensitive material and should be handled according to the principles of the Data Protection Act 1998. If this email carries a protective marking of PROTECT or RESTRICTED in the header it should be handled according to HMG guidelines, if not protectively marked it can be regarded as UNCLASSIFIED. If this Email has been misdirected, please notify the author immediately. If you are not the intended recipient you must not disclose, distribute, copy, print or rely on any of the information contained in it or attached, and all copies must be deleted immediately. Whilst we take reasonable steps to try to identify any software viruses, any attachments to this email may nevertheless contain viruses which our anti -virus software has failed to identify. You should therefore carry out your own anti-virus checks before opening any documents. Somerset County Council will not accept any liability for damage caused by computer viruses emanating from any attachment or other document supplied with this email. All GCSx traffic may be subject to recording and / or monitoring in accordance with relevant legislation.