+ Post New Thread
Results 1 to 6 of 6
vBCms Comments Thread, Article: Data Protection Blunder For York University in ; You can view the page at http://www.edugeek.net/content.php?r...ork-University...
  1. #1
    CAM
    CAM is offline

    CAM's Avatar
    Join Date
    Mar 2008
    Location
    Reigate Area, Surrey
    Posts
    4,416
    Thank Post
    882
    Thanked 416 Times in 316 Posts
    Blog Entries
    61
    Rep Power
    328

    Article: Data Protection Blunder For York University


  2. #2

    Join Date
    Mar 2009
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    We are currently being warned that Google Apps does not fall in line with one of the main rules of the Data Protection Act.

    "Personal data shall not be transferred to a country or territory outside the EEA unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data."

    Google won't tell us where the data is held so this is a problem. Not sure if Live@edu would be a similar issue.

  3. #3

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,867
    Thank Post
    412
    Thanked 778 Times in 651 Posts
    Rep Power
    182
    Google have some safe harbour arrangement for EU data, but I don't know what it applies to. You'll have to ask them.

  4. #4

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    10,074
    Thank Post
    1,384
    Thanked 1,887 Times in 1,169 Posts
    Blog Entries
    19
    Rep Power
    614
    For information about the Safe Harbor agreement you can see Google Apps for Education - Free Hosted Email (Gmail) for EDU , is used by the OU and a number of other HE/FE institutes, was cleared by Becta as being ok (with no disagreement from ICO) and is being used by a lot of schools.

    The problem is likely not to have been with Google but with the configuration and/or use of the services ... but the investigation will show what went wrong. Most DPA breaches are to do with people making mistakes and policies not being followed, not the technology used.

  5. #5
    levell3r's Avatar
    Join Date
    Jan 2011
    Location
    west mids
    Posts
    32
    Thank Post
    4
    Thanked 5 Times in 5 Posts
    Rep Power
    8

    Personal Information Received from the EU/EEA and/or Switzerland:
    Google Inc., and other companies within the Google Inc. corporate group, collect personal information in relation to natural persons from within member states to the European Union ("EU data subjects") as result of: 1) the use and operation by Google Inc. and its group members of internet domains which are registered in member states of the European Union from which Google Inc. and its group members carry on their business and supply services to EU data subjects; and 2) the distribution, within member states of the European Union, by Google Inc. and its group members (and other third parties authorised to do so by Google Inc. and its group members) of applications and products to EU data subjects; and 3) the supply of goods and/or services to Google Inc. and its group members by companies and businesses located in member states of European Union (which may in some cases involve the supply or exchange of personal information in relation to EU data subjects). Personal information collected under (1) and (2) is held and processed by Google Inc. and its group members for differing purposes depending upon the particular service or product being provided. These purposes may include any of the following: sales and marketing to such consumers and/or businesses, contract negotiation, effecting transactions with such consumers and/or businesses, supplying services and/or products to such consumers and/or businesses, operating, developing and improving our services and products, personalising our services and products, financial processing and management, fraud detection and prevention, compliance with governmental, legislative and regulatory bodies, customer support and/or customer relationship management. Personal information collected under (3) is held and processed by Google Inc. and its group members for differing purposes depending upon the nature of the supply of goods and/or services. These purposes may include any of the following: contract negotiation, effecting transactions with such individuals and/or businesses, financial management and/or supplier relationship management, fraud detection and prevention, and compliance with governmental, legislative and regulatory bodies.
    Privacy Policy Effective: 10/3/2010


    doesnt the safe harbour agreement cover this? The fact that they are a US firm means they are covered, no matter where the data 'is' .... ?

  6. #6

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,214 Times in 761 Posts
    Rep Power
    395
    Quote Originally Posted by sipmar View Post
    We are currently being warned that Google Apps does not fall in line with one of the main rules of the Data Protection Act.
    May I ask who issued said warning? As GrumbleDook and levell3r have outlined already, they are giving out incorrect information.



SHARE:
+ Post New Thread

Similar Threads

  1. Data Protection - Transfer data to others
    By Dancer in forum School ICT Policies
    Replies: 3
    Last Post: 17th March 2010, 01:33 AM
  2. Replies: 0
    Last Post: 28th September 2009, 02:23 PM
  3. IT Academy - University of York (Microsoft Training)
    By adamchapman in forum Courses and Training
    Replies: 1
    Last Post: 3rd June 2009, 12:15 PM
  4. Good article highlight data protection.
    By russdev in forum School ICT Policies
    Replies: 9
    Last Post: 23rd February 2009, 01:12 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •