yes, but at a much lower level. the original problem case could allow someone to track ALL the reservations an individual had made, and thereby gain an instant overview of their reading habits. In the case of Andrew's scenario, it would be a one off snapshot, so is much less likely to be problematic. Nonetheless, use caution....
Charles
Professor Charles Oppenheim
--- On Fri, 18/2/11, Andrew Buxton <[log in to unmask]> wrote:
From: Andrew Buxton <[log in to unmask]>
Subject: Re: Data protection question
To: [log in to unmask]
Date: Friday, 18 February, 2011, 9:49
There seems to be a practice now of leaving reserved books on an open shelf for
collection. If they indicate the reserver's name and/or borrower number
presumably the same issue arises.
Andrew
-----
Andrew Buxton
Lewes, East Sussex, UK
________________________________
From: CHARLES OPPENHEIM <[log in to unmask]>
To: [log in to unmask]
Sent: Thu, 17 February, 2011 16:30:52
Subject: Re: Data protection question
This is a case where the law doesn't give you a yes/no answer - it requires you
to take "appropriate steps"; so you have to make a judgement based upon the
sensitivity/value of the information contained on the slips. Removing the
student's name does not get you off the hook under the DPA, as there is still
enough information present (ID number) to identify the person when combined with
other data held within the University, and equally removing the number but
leaving the name there still makes the information subject to the DPA.
Personally, I'd err on the side of caution and shred them.
Charles
Professor Charles Oppenheim
--- On Thu, 17/2/11, Colin Johnston <[log in to unmask]> wrote:
From: Colin Johnston <[log in to unmask]>
Subject: Data protection question
To: [log in to unmask]
Date: Thursday, 17 February, 2011, 12:37
Recently, some of us at Goldsmiths' library have had a discussion about the
disposal of our reservation slips - are we legally obliged to shred them? If so,
what information would we need to remove from the slip that would allow us to
bin them in the traditional fashion.
The information we print at present includes user name, registration number,
item title and date when the item could be returned to the shelves. If we remove
the student number only (best option for us) is the information retained still
fall under the influence of the DPA?
Any and all opinions welcomed.
Best.
Colin
~~~~~~~~~~~~~~~~~~~~~~~~
Colin Johnston
The Library
Goldsmiths, University of London
New Cross
SE14 6NW
~~~~~~~~~~~~~~~~~~~~~~~~
Tel. 020 7917 7155
Fax 020 7919 7165
[log in to unmask]
~~~~~~~~~~~~~~~~~~~~~~~~
|