philjones2000 Posted October 17, 2012 Posted October 17, 2012 Hi We use google apps for education for email here- but we have had a Freedom of Information act request for emails concerning a particular person How do we go about doing this!? It seems like I'd have to search manually through everyone's inbox??? And where does that leave their/my data protection? Phil
AngryTechnician Posted October 17, 2012 Posted October 17, 2012 Not sure on the technical procedure, but as for Data Protection, this is covered by a section 40 exemption from disclosing information about identifiable individuals where it would breach the Data Protection Act. Basically, if there is a risk of personal information about someone other than the FoI subject being released, that normally* trumps FoI, so you will either need to redact or withhold that piece of correspondence. * There are conditions where this isn't the case, guidance available here: http://www.ico.gov.uk/for_organisations/guidance_index/~/media/documents/library/Freedom_of_Information/Practical_application/APPLYING_SCHEDULE_CONDITION_V1.ashx 1
philjones2000 Posted October 17, 2012 Author Posted October 17, 2012 :-) Thanks for the reply Apparently this is a data protection act request... What confuses me is that I surely can't access other people's email as that would break their data protection...
CyberNerd Posted October 17, 2012 Posted October 17, 2012 ExamplesAccountAuditing - google-apps-manager - GAM Account Auditing Commands - Dito Google Apps Manager - Google Project Hosting GAM now gives admins the ability to audit users accounts using the newly announced Google Apps Audit API. With Auditing, you can monitor current emails and chats to and from a user, you can get an user activity log showing login, login failures and logouts for the past 30 days and you can export a user's mailbox for discovery purposes.
CyberNerd Posted October 17, 2012 Posted October 17, 2012 What confuses me is that I surely can't access other people's email as that would break their data protection... It would do if they hadn't already accepted the fact when they signed you AUP that you reserve the right to do so.
Achandler Posted October 17, 2012 Posted October 17, 2012 For the DPA to apply, it means the person who sent the emails has to be requesting the data which is an odd thing to do anyway...
Domino Posted October 17, 2012 Posted October 17, 2012 For the DPA to apply, it means the person who sent the emails has to be requesting the data which is an odd thing to do anyway... No, if an email holds data about you, regardless of who the sender and receiver were, you can request it under the DPA Access Your Personal Information - Subject Access Request - ICO
detjo Posted October 18, 2012 Posted October 18, 2012 (edited) ------ Edited October 18, 2012 by detjo deleted
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now