Data Retrieval Requirements for Personal Information

[Jens Müller]

This text should go to the base/person package.


Many legislations, including that of all EU member countries, give
customers (in fact, any person) the right to request from a company
(in fact, anyone storing their personal information for business
purposes) information about personal information stored about them.

Therefore, a report should be created printing all information stored
in the system about a specific person.

Privacy regulations also offer the right to get information about
where such information has been submitted, so automatic (and manual)
transmission of personal information has to be recorded, so that it
can get included in the above-mentioned report.

Another right is to get such information locked, which needs to be
implemented in all parts of the system.

Access to any and all personal information about a specific person
should of course be limited to authorized personell dealing with such
information requests.

-- 
Please DON'T CC me on replies!