 |
 |
Does anyone have any views on whether NoK contact details will automatically constitute the personal data of the NoK within the material scope of GDPR?
While a name and contact method in Student A's record, in the section that tells a reader 'I want this person contacted in the event of incident, accident, demise etc' would be a detail about Student A, I'm not so sure it would necessarily be NoK's 'GDPR-grade personal data'.
That is, Art 2 GDPR frames the general applicability of the regulation to "...the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system".
A name and contact address / number is generally taken to be personal data, but unless it forms part of the filing system that Student A's records are in - is it a type of NoK Personal Data that GDPR would be interested in?
Possibly dancing on the head of a pin here, but to my mind 'part of a filing system' is a rather more involved thing than being 'part of the files within a filing system': being part of a 'system' suggests being part of the machinery (literally or figuratively), in a way that can influence or contribute to the system's continued operation. Being a detail on a page inside one of the files - or not, if the detail were absent - would not have the same scope for influence over the filing system and so can't really be called 'part of the system'. A clumsy analogy would be a Post Office sorting office - envelope, address and stamp are part of the system as they can be automatically sensed by the machinery and their detail, presence or absence will have an effect on when or if they get delivered correctly and on time. However - the system won't automatically know whether the envelopes it is sorting contain good news, a Dear John letter, a final demand or a wad of tenners: the internal details are part of the post, in that they've definitely been posted - but they're no more part of the postal system than water in a pipe is a part of the plumbing.
Just my thoughts on the matter, anyway.
Happy 2019 All!
Owen Thomas
Deputy Data Protection Officer
Data Protection Office
Strategy, Performance and Transformation Directorate
Sunderland City Council
0191 5611263
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html and are sent in the body of an otherwise blank email to [log in to unmask]
Any queries about sending or receiving messages please send to the list owner [log in to unmask]
(Please send all commands to [log in to unmask] not the list or the moderators, and all requests for technical help to [log in to unmask], the general office helpline)