Quote:
|
Originally Posted by Kitty
One main point is would you want someone in another country access to your details... After all the Data protection act only covers us in this country.. what security have we got that our details will not be handed around to others.. On security I will not use any company that uses Indian call centres that deal in money. I will not give out any details to the indian call centres.
|
So HSBC, Abbey, Barclays, Axa, BT, Aviva won't be seeing much of your business. Nationwide would be a good place for your monies.
Actually it coveres Europe, not the UK, but thats not really relevant here.
A similar para exists for customer information, but in principal the data controller remains the same, it is the data processor that changes
V1.0 August 2002 50 The Employment Practices DP Code Part 2: Employment Records
15 OUTSOURCING DATA PROCESSING
Frequently, organisations do not process all the data they hold on workers themselves but outsource this to other organisations. Organisations which process the data on behalf of other organisations include specialist businesses which run payroll systems, sister companies which manage the centralised computer system on which group worker records are kept, and organisations which provide a secure facility for the storage of archived manual records. Such organisations are termed †˜data processorsââ ¡Ãƒâ€šÃ‚¬ÃƒÂ¢Ã¢â‚¬Å¾Ã‚¢ in the Data Protection Act.
The benchmarks
1. Satisfy yourself that any data processor you choose adopts appropriate security measures both in terms of the technology it uses and how it is managed.
2. Have in place a written contract with any data processor you choose that requires it to process personal information only on your instructions, and to maintain appropriate security.
3. Where the use of a data processor would involve a transfer of information about a worker to a country outside the European Economic Area, ensure that there is a proper basis for making the transfer.
http://ico-cms.amaze.co.uk/DocumentU...%20records.pdf