The Data a Site Holds About Other People's Staff
Identity documents, biometrics, competence records and movement data about people the site does not employ. What that obliges, and who is responsible.
Reference
A site holds sensitive data about hundreds of people it does not employ, and the responsibility does not divide the way everybody assumes.
4 notes
Identity documents, biometrics, competence records and movement data about people the site does not employ. What that obliges, and who is responsible.
Reference
Questions arrive years after completion, when the site is gone, the system is switched off and the team has dispersed. What to keep and who keeps it.
Procedure
A check that falls on the contractor regardless of who engaged the person, carries penalties that are not commercial, and is the one most often assumed to have been done by somebody else.
Analysis
Several companies, one site, and a set of overlapping obligations that do not divide neatly. Who is responsible for what, and the assumptions that leave gaps.
Reference