> ... I am particularly mindful of the statement in the ICO's Guide to Data
> Protection which states in B5.21, 'If it is appropriate to delete a record
> from a live system, it should also be deleted from any back-up of the
> information on that system'.
I would suggest that you make explicit the distinction between a backup
copy for disaster-recovery and an archival copy, and you're very clear
about the retention periods for each and the type of data which is
appropriate for each.
Paragraph C.1.a.10 of the Guide might then apply to your DR backups, though
not of course to your archives, particularly if the DR retention period is
enforced automatically.
--
Dr George D M Ross, School of Informatics, University of Edinburgh
10 Crichton Street, Edinburgh, Scotland, EH8 9AB
Mail: [log in to unmask] Voice: +44 131 650 5147 Fax: +44 131 650 6899
PGP: 1024D/AD758CC5 B91E D430 1E0D 5883 EF6A 426C B676 5C2B AD75 8CC5
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|