Data Protection Act question

[ostell]

My local sailing club, probably driven by someone who like to be in charge and knows everything, has come up with a change that requires permission be given by each and every member for their name and telephone number to be included in a membership directory.

My understanding was that this use of personal data was acceptable as long as it was for internal use within the organisation.

Anybody got any ideas and pointer about this? This woman seems to be adding another layer of bureaucracy to a process that wasn't broken and didn't need fixing. I've crossed swords with her before about the DPA and what she thinks is in it.

[seduraed]

Re: Data Protection Act question

The membership details in my local Quaker Meeting are recorded in the list of members which is published. However every member has to give individual consent to be included in the membership book which is seem as a potentially public document. I know one member whose name is included in the list to of members with the note "address with elderly at the members request".

[Peridot]

Re: Data Protection Act question

Hi Ostell,

In a nutshell, all members should give consent for the information to be held. The rules surrounding Data Protection are due to change in May 2018 when the GDPR (General Data Protection Rules) come into force. Unfortunately (or fortunately) it does significantly tighten up how personal data is held and how it should be destroyed too.

I would say there is no harm in just getting everyone on the members list to confirm they are happy for the info to be held by the club. This article may help: https://www.thebmc.co.uk/gdpr-mounta...s-introduction
I appreciate it is concerning a mountaineering club but is equally relevant to your situation.

Probably not what you wanted to hear sorry.

[ostell]

Re: Data Protection Act question

Thanks for that. The info is purely name and phone number, info that is widely available anyway

[Peridot]

Re: Data Protection Act question

Irrelevant unfortunately it is still personal data and therefore consents are needed.
Good luck.