outsourcing GP appointments to India: is this legal under DPA?

[David Biggins]

> -----Original Message-----
> From: ukcrypto-bounces at chiark.greenend.org.uk [mailto:ukcrypto-
> bounces at chiark.greenend.org.uk] On Behalf Of Andrew McLean
> Sent: 18 January 2011 7:57 PM
> To: ukcrypto at chiark.greenend.org.uk
> Subject: Re: outsourcing GP appointments to India: is this legal under
DPA?


> Another analogous situation is export controls on "technologies" (i.e.
> intangibles). Do you think anyone would get away with "Your honour I
didn't
> export the plans for the ****, they remained on a server in the UK.
Yes, they
> could be viewed on a client workstation in Iran, but the plans stayed
in the
> UK".


A little over a decade ago,  this was the position with respect to
strong encryption technology - at least according to CESG and the DTI at
the time.

Sending a strong crypto algorithm to certain countries would be an
offence.

But putting them on a server where someone could download them, was not.

It seemed rather ridiculous even then,   and has not grown less so with
time.

D.