Institutions cannot guarantee that leavers will read the collection notices – how does this affect the data protection position?
The Data Protection Act says that information concerning what happens to personal data must be made available to the individuals concerned. Organisations must make every reasonable effort to provide this, but not necessarily that which is disproportionate to the purposes for which the data is collected. Therefore, as long as institutions have made the effort to provide the information as described above, this does not cause a problem.
