[Gllug] Data protection question

[Jason Clifford]

On Thu, 2007-12-06 at 11:27 +0000, Alain Williams wrote:
> I look after a mail system (MTAs, cyrus, webmail) for a customer - a college.
> One student has been accused of sending racist email to another, I have been asked
> to retrieve what evidence I can. I can find the emails still in their folders and
> also look at the MTA log files.
> 
> Any reason why I should not do this (I think that I am in the clear).
> 
> The college 'Internet Policy Statement' contains (amongst other things):
> 
> 	The staff will monitor the network for unacceptable use, and any offensive material will be removed and
> 	appropriate action will be taken against those involved.
> 
> (Strictly speaking I am not a member of staff, but I don't think that that is important)

If you are engaged by the college to carry out work for them you become
staff for the period of the engagement.

In your position I'd request written confirmation of the engagement and
have another member of staff present when carrying out the work.

I'd also advise them to change the wording of the policy so that "the
college, or its authorised agents, will monitor..." which provides more
scope for this to be done properly.

Jason

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug