Another strange thing from the OIC:
I complained that a company was claiming to hold my data "indefinitely",
even when much of it was explicitly marked as unused, related to past
offers, or for historic or obsolete systems or purposes.
The OIC responded:
"As regards the period of time for which your data have been kept by the
data controller, I should mention that we are not in a position to
determine what is longer than necessary for each industry sector. It is
likely that there are many determining factors such as legal
requirements as well as legitimate business practices e.g. bill queries
etc. that will influence the decision on the period of time for the
retention of such records. I would advise you to take this issue up with
the data controller"
This seems very strange to me. This is one of the central principles of
Data Protection, and the OIC are stating that they are not in a position
to tell whether or not it is adhered to!
Tony
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
http://www.jiscmail.ac.uk/help/commandref.htm
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|