In the past I have used "Company is a data controller and Supplier is a data
processor within the terms of 'the act'. Supplier will act in all cases
within the letter and spirit of the 'the act' and the definitions within
for the purposes of this contract"
So far I have had no issues with such wording, which replies simply on the
definitions within the laws on the statute books. If dealing in other
countries I modify the wording slightly to handle them
_____________________________________________________________
Tim Trent
Chief Privacy Officer EMEA
Gartner
EMEA Marketing, Tamesis, The Glanty, Egham, Surrey, United Kingdom,
TW20 9AW
Switchboard +44 (0)1784 431 611, Direct Line +44 (0)1784 267 335, Mobile +44
(0)7710 126 618, Fax +44 (0)1784 268 932
http://www.gartner.com
[log in to unmask]
The opinions expressed in this message are my own, and may or may not
reflect those of my employer. They are expressed as a part of the
discussion on the JISCMail mailing list on data protection and for no other
purpose. They have no legal standing and are offered as part of informed
and informal discussion. They may NOT be attributed to Gartner in any way.
Any personal data provided is provided expressly for use of discussions on
the JISCMail Data Protection Discussion list. Under the UK Data Protection
Act 1998 I expressly forbid any individual or organisation to make
commercial use of my data published either on the email list or in the
archives of that or other lists whether this message appears or not. This
includes messages already published in the archives.
-----Original Message-----
From: Gil Richardson [mailto:[log in to unmask]]
Sent: 10 September 2002 12:25
To: [log in to unmask]
Subject: Data Processors
Hallo Again
I have been away from the list for a while but am now back (and a bit
rusty!)
I wonder if anyone can point me in the direction of a form of words for a
Data Protection clause in a contract with a Data Processor, where we (Data
Controller) supply them with a straightforward list of our membership
contact details (name and address only) from our membership database for the
purpose of publishing the list in our annual Members Reference Book. The
Data Processor is the publisher.
I have looked at BSI PD-0012-6:2001 but do not find it explicit in terms of
a form of words. I would be grateful for any examples I could adapt.
Gil
Gil Richardson
Senior Information Manager
RCGP
email: [log in to unmask]
Website: www.rcgp.org.uk
Tel: 020 7581 3232 ext 231
Fax: 020 7584 1992
"Promoting Excellence in Family Medicine"
This email is confidential. It may not be disclosed to, or used by, anyone
other than the addressee. If you receive this message in error, please
advise the sender immediately.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|