Greater consent and a higher level of security is required from the individual concerned to keep records concerning the following subjects:
In assessing whether a record should be kept, the data controller (normally the incumbent or PCC) should assess the purpose for which it is kept. They should then determine in relation to the purpose whether the data is relevant and no more than is required to meet the purpose. They should then ask if the data is current and up to date, and whether it is still required for the purpose. If these conditions are not met the data should be deleted.
The data controller must further ensure that the data is kept securely and not disclosed to a third party without consent, or transferred to any country without adequate data protection. This is particularly important with the increased use of email to distribute information.
Further information can be obtained from the Synod Office at London Diocesan
House (020 7932 1228) or the Data Protection Commissioner's office (01625 545740).