Interesting! I suppose the DC vs Personal Use position will depend to some degree on how mandatory the portfolios are. If they're mandated by professional bodies but not backed up in a legislative requirement, you could (backed up by various FOI arguments) make an argument that 'personal' equates to 'home' OR that 'personal' includes 'some work-related' info processing. However, if they're mandated by law (can't think of any off the top of my head), then DPA S1(4) seems pretty clear that anyone maintaining a mandated portfolio is a DC. Owen ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html If you wish to leave this list please send the command leave data-protection to [log in to unmask] All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm Any queries about sending or receiving messages please send to the list owner [log in to unmask] Full help Desk - please email [log in to unmask] describing your needs To receive these emails in HTML format send the command: SET data-protection HTML to [log in to unmask] (all commands go to [log in to unmask] not the list please) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^