NHS email encryption
Caspar Bowden
ukcrypto at chiark.greenend.org.uk
Fri, 31 Aug 2007 14:47:11 +0100
FYI - the ICO has published new guidance on the meaning of personal data in=
DPA, following an Art.29 WP Opinion discussing same in EU DPD some weeks a=
go. Both are fascinating, and some surprises tucked away for DP Kremlinolog=
ists...
http://www.ico.gov.uk/upload/documents/library/data_protection/detailed_spe=
cialist_guides/personal_data_flowchart_v1_with_preface.pdf
http://ec.europa.eu/justice_home/fsj/privacy/docs/wpdocs/2007/wp136_en.pdf
--
Caspar Bowden
>-----Original Message-----
>From: ukcrypto-admin@chiark.greenend.org.uk [mailto:ukcrypto-admin@chiark.=
greenend.org.uk] On Behalf Of PeteM
>...
>Really? Who says? I thought it was the other way around. Anyway, in what
>circumstances would it not be possible to anonymise personal data? I can
>see that in some circumstances it might be necessary to *break*
>anonymity that had been imposed, but I can't see how it might be
>impossible to impose it in the first place.
...
>These items cannot be used to identify a subject - i.e. discover his
>name and address - because each particular (named) individual's drug
>history is not in the public domain, unlike his age, sex, address etc.