My clients are private sector. There are usually several points of verification, such as employee number and start/finish date, or an order number, delivery/billing address, contact telephone number for customers. It's a matter of how duly diligent one needs to be commensurate with the sensitivity of the data to be supplied.
I have always recommended photoID (practically essential for CCTV requests), a copy of the V5 document for CCTV of vehicle-involved incidents, and a utility bill (includes telcos and Sky) to confirm the address for supply. If the name and address on all the documents and the original SAR do not agree, the ID would not be acceptable ASIS.
Regards - Michael Bacon
Grimbaldus Limited
> On 5 Mar 2015, at 10:56, Andrew Goodfellow-Swaap <[log in to unmask]> wrote:
>
> I'm intrigued as to everyone's apparent willingness to accept photocopied ID documents without certification!
>
> Given the sensitive information that we disclose (often social care records) it is almost inconceivable to me that an, often poor, copy of a document (that we haven't seen and have no way of satisfying ourselves whether it actually is a true copy) would be considered to be sufficient to ensure that the person making the request is the person they are claiming to be.
>
> It seems almost a case of "I AM WHO I AM." (to refer to Lawrence's comment in another thread :) )
>
> Colour me surprised.
>
> Andrew Goodfellow-Swaap
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> All archives of messages are stored permanently and are
> available to the world wide web community at large at
> http://www.jiscmail.ac.uk/lists/data-protection.html
> If you wish to leave this list please send the command
> leave data-protection to [log in to unmask]
> All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
> Any queries about sending or receiving messages please send to the list owner
> [log in to unmask]
> Full help Desk - please email [log in to unmask] describing your needs
> To receive these emails in HTML format send the command:
> SET data-protection HTML to [log in to unmask]
> (all commands go to [log in to unmask] not the list please)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at http://www.jiscmail.ac.uk/help/commandref.htm
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|