Sharing personal data across and between institutions and service providers can be complex and will require compliance with legal responsibilities. This briefing paper is designed to help institutions understand the implications of the creation and dissemination of personal data, their roles and responsibilities regarding consent management, arising issues associated with anonymised data as well as the possible role of risk management decisions. This briefing paper is based on a more comprehensive report by JISC Legal “Consent Management: Handling Personalisation Data Lawfully” - http://www.jisclegal.ac.uk/Themes/IdentityManagement.aspx - which was commissioned by JISC’s Information Environment team.
The Briefing Paper by Naomi Korn and Professor Charles Oppenheim includes -
A Risk Assessment Checklist
FAQS on Library Activity Data and
Good Practice Recommendations
and is available in
pdf format and
Microsoft Word format.
16 November 2011