5 ms·
I imagine this policy would have to be different for those in the UK, right? I thought I had read that the Data Protection Act (of 1998) forced companies to sen
by danso 8y ago
I imagine this policy would have to be different for those in the UK, right? I thought I had read that the Data Protection Act (of 1998) forced companies to send data in situations they would not for other countries:
https://www.gov.uk/respond-data-protection-request https://www.gov.uk/respond-data-protection-request
> Under data protection law, anyone can ask if your organisation holds personal information about them - you must respond to their request as soon as possible, and within one month at most.
- CiaranMcNulty 8y agoCrash data is not necessarily Personally Identifiable Information
- Someone1234 8y agoYou added the word "Identifiable." The DPA isn't limited to just that.
- thierryzoller 8y agoPII is a term coined in the US
- Hupriene 8y agopolice reports of accidents are public record, you should be able to pretty easily go from crash data to personal identity based on public records. Sounds like PII to me.
- ascorbic 8y agoYes, and the whole of the EU. The Data Protection Act is in the process of being replaced with a new Act that incorporates the GDPR into UK law. The GDPR expands that right further.