Have you been asked for anything like this specifically? I wouldn’t include this kind of information in its standard searches, and haven't seen anywhere that does (although I've never worked for an ISP)
If someone asked for 'all information held about me' and you list in your acknowledgement the systems/records that you'll search then I would expect them to come back to you to tell you if they wanted firewall logs, for instance.
If a staff member asked for 'a list of all the websites I've visited' then I'd cross that bridge when we got to it.
Dan
-----Original Message-----
From: This list is for those interested in Data Protection issues [mailto:[log in to unmask]] On Behalf Of Richard Thorne (Computer Services Manager)
Sent: 14 November 2018 11:48
To: [log in to unmask]
Subject: Re: [data-protection] SARs and Firewall logs
I’m sensing that my question may have been met with a long, straight road, interspersed with occasional tumbleweed whilst the sound of a lonesome bell tolling in the distance is carried on the wind.
Richard
Richard J. Thorne, FBCS, CITP, CDCM, RITTech
Rheolwr Gwasanaethau Cyfrifiadurol / Computer Services Manager
Coleg Gŵyr Abertawe / Gower College Swansea
Heol Tycoch, Abertawe, SA2 9EB / Tycoch Road, Swansea, SA2 9EB
Ebost / Email: [log in to unmask]<mailto:[log in to unmask]>
Ffôn /Tel. (Est /Ext.) 4055
Ffôn (RhU) / Tel. (DDI) +44 (0)1792 284 055
Ffôn symudol gwaith /Tel. (Work Mob.) +44 (0)7557 20 47 67
Ffôn symudol personol / Tel. (Pers. Mob.) +44 (0)77 88 857 857
From: This list is for those interested in Data Protection issues <[log in to unmask]> on behalf of "Richard Thorne (Computer Services Manager)" <[log in to unmask]>
Reply-To: "Richard Thorne (Computer Services Manager)" <[log in to unmask]>
Date: Wednesday, 7 November 2018 at 10:52
To: "[log in to unmask]" <[log in to unmask]>
Subject: [data-protection] SARs and Firewall logs
Good morning,
I would very much appreciate the group’s views on data held within firewall logs, and other similar system/security based logs. For such logs to be useful for the purposes of Information Security, and dealing with technical matters, they will naturally contain some identifying information, such as IP addresses, etc. Typically these logs are not that readable, and for logs of Internet traffic especially, they can be extensive, and include other information that would probably need to be redacted.
How are members of the group dealing with such logs when it comes to responding to SARs? If you are providing such information, how are you satisfying the requirement of making it understandable by the average person?
Many thanks
Richard
[cid:image004.jpg@01D47687.E27CCFC0]
[FB_IMG_1519246893286]
Richard J. Thorne, FBCS, CITP, CDCM, RITTech
Rheolwr Gwasanaethau Cyfrifiadurol / Computer Services Manager
Coleg Gŵyr Abertawe / Gower College Swansea
Heol Tycoch, Abertawe, SA2 9EB / Tycoch Road, Swansea, SA2 9EB
Ebost / Email: [log in to unmask]<mailto:[log in to unmask]>
Ffôn /Tel. (Est /Ext.) 4055
Ffôn (RhU) / Tel. (DDI) +44 (0)1792 284 055
Ffôn symudol gwaith /Tel. (Work Mob.) +44 (0)7557 20 47 67
Ffôn symudol personol / Tel. (Pers. Mob.) +44 (0)77 88 857 857
Ymwadiad - Mae'r e-bost hwn wedi'i fwriadu ar gyfer y derbynnydd(derbynyddion) yn unig. Os ydych wedi derbyn yr e-bost ar gam, dylech ddileu pob copi ohono ac unrhyw atodiadau, a thrin y cynnwys fel cynnwys cyfrinachol. Ymddiheurwn am unrhyw anghyfleustra y gall hyn ei achosi. Mae'r barnau a safbwyntiau a fynegir yn y neges e-bost hon yn rhai'r awdur ac ni ddylid cymryd eu bod yn rhai'r coleg. Mae'r e-bost hwn wedi cael ei wirio gan feddalwedd gwrthfeirysau. Nid yw'r coleg yn cymryd unrhyw gyfrifoldeb am unrhyw niwed sy'n gysylltiedig � derbyn yr e-bost hwn, sut bynnag y'i hachosir.
Disclaimer - This email is intended for the addressee(s) only. If however you have received this email in error, please delete all copies of it and any attachments, and treat the contents as confidential. We apologise for any inconvenience this may cause. The views and opinions expressed in this email message are those of the author and must not be assumed to be those of the college. This email has been checked by anti-virus software. The college accepts no liability for any damages related to receipt of this email, howsoever caused.
________________________________
All archives of messages are stored permanently and are available to the world wide web community at large at http://www.jiscmail.ac.uk/lists/data-protection.html
Selected commands (the command has been filled in below in the body of the email if you are receiving emails in HTML format):
* Leaving this list: send leave data-protection to [log in to unmask]<mailto:[log in to unmask]&BODY=LEAVE%20data-protection>
* Suspending emails from all JISCMail lists: send SET * NOMAIL to [log in to unmask]<mailto:[log in to unmask]&BODY=SET%20*%20NOMAIL>
* To receive emails from this list in text format: send SET data-protection NOHTML to [log in to unmask]<mailto:[log in to unmask]&BODY=SET%20data-protection%20NOHTML>
* To receive emails from this list in HTML format: send SET data-protection HTML to [log in to unmask]<mailto:[log in to unmask]&BODY=SET%20data-protection%20HTML>
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html and are sent in the body of an otherwise blank email to [log in to unmask]<mailto:[log in to unmask]>
Any queries about sending or receiving messages please send to the list owner [log in to unmask]<mailto:[log in to unmask]>
(Please send all commands to [log in to unmask]<mailto:[log in to unmask]> not the list or the moderators, and all requests for technical help to [log in to unmask]<mailto:[log in to unmask]>, the general office helpline)
________________________________
Ymwadiad - Mae'r e-bost hwn wedi'i fwriadu ar gyfer y derbynnydd(derbynyddion) yn unig. Os ydych wedi derbyn yr e-bost ar gam, dylech ddileu pob copi ohono ac unrhyw atodiadau, a thrin y cynnwys fel cynnwys cyfrinachol. Ymddiheurwn am unrhyw anghyfleustra y gall hyn ei achosi. Mae'r barnau a safbwyntiau a fynegir yn y neges e-bost hon yn rhai'r awdur ac ni ddylid cymryd eu bod yn rhai'r coleg. Mae'r e-bost hwn wedi cael ei wirio gan feddalwedd gwrthfeirysau. Nid yw'r coleg yn cymryd unrhyw gyfrifoldeb am unrhyw niwed sy'n gysylltiedig � derbyn yr e-bost hwn, sut bynnag y'i hachosir.
Disclaimer - This email is intended for the addressee(s) only. If however you have received this email in error, please delete all copies of it and any attachments, and treat the contents as confidential. We apologise for any inconvenience this may cause. The views and opinions expressed in this email message are those of the author and must not be assumed to be those of the college. This email has been checked by anti-virus software. The college accepts no liability for any damages related to receipt of this email, howsoever caused.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|
