I have just had a request from a police officer for information about a former student in relation to an on-going investigation. The data we have is not really highly personal as they had no issues whilst at
the College but it does raise the question of what other institutions do with such requests? I have asked for a more formal approach that just a phone call to validate the request and will log it as a data protection incident but other than that I am at a
bit of a loss.
Tim