Whilst everyone is focussing on the Safe Harbor judgement, has anyone had a think about any potential fall out of the Bara judgement for those of us in the public sector, particularly for retrospective sharing?

Anyone any idea what constitutes having 'told' someone we will share there data. Is a (detailed, layered) FPN on a website adequate??

Anyone have any concerns about Information Sharing Agreements, and where we are joint controllers or data controllers in common, will we have to evidence some monitoring of our partners to ensure THEY gave adequate notice? 



     All archives of messages are stored permanently and are
      available to the world wide web community at large at
     If you wish to leave this list please send the command
       leave data-protection to [log in to unmask]
All user commands can be found at
 Any queries about sending or receiving messages please send to the list owner
              [log in to unmask]
  Full help Desk - please email [log in to unmask] describing your needs
        To receive these emails in HTML format send the command:
         SET data-protection HTML to [log in to unmask]
   (all commands go to [log in to unmask] not the list please)