Results 1 to 3 of 3
  1. #1
    Join Date
    Jun 2014
    Posts
    2

    Question How and when Does the Data Protection Act Apply

    Hello!

    Firstly, thank you for taking the time to read my post. I appreciate any and all feedback here. I have an idea I want to begin developing, but I want to first check how the DPA (Data Protection Act) applies, if in fact it does. My idea isn't overally complicated, but a certain element of it in particular, the data storage, is something I want some advice on. I think starting with an example would be best.

    I run through the following steps:

    1. Take a given name and date of birth
    2. Pass it through a one-way mathematical function
    3. Keep the resulting hash, received from the function, and store it in a database
    4. Destroy the original, plain text version of the information (name, dob, etc)


    Given I no longer have the original, plain text information, I cannot personally identify any one individual. The hash, which looks like randomly generate data (for example, "5170dbfbc715b4288f75141e48c504f40a851e931015a6f06 970b30b" is the hash form of the string "movedx 2014-06-08"), cannot be reversed. The original data can never been obtained from the hash without brute forcing it, which would likely take more time than our sun's life span has to offer. Therefore, my question is: am I in fact still storing sensitive information? To extend the example further, I want to collect and store some additional information beside this hash:

    1. Overall satisfaction
    2. Recommendation
    3. 1-5 star rating


    Basically metadata. Nothing that's directly relevant to the individual's person.

    Would the DPA apply if I wanted to allow others to provide the same details, generating the same hash (which is always the same if the information is exactly the same), and then looking up the hash in the database to see if there is a result (returning the metadata if there is)? In short, I want to create a system that provides a "lookup table" others outside of my company can use, but without storing any personal information.

    All help appreciated.

    - M

  2. #2
    Join Date
    Sep 2010
    Posts
    19,200

    Default Re: How and when Does the Data Protection Act Apply

    We do US law only here. UK law on this forum: www.thelawforum.co.uk

  3. #3
    Join Date
    Jun 2014
    Posts
    2

    Default Re: How and when Does the Data Protection Act Apply

    Well that's embarrassing! Sorry to have wasted your time.

    - M

    1. Sponsored Links
       

Similar Threads

  1. Legal Permanent Residency: Should I Hand in My Green Card and Re-Apply or Apply for I-191
    By laurencetindall in forum Permanent Residency and Naturalization
    Replies: 1
    Last Post: 04-06-2014, 11:19 AM
  2. Naturalization: Employment Based Green Card to Naturalization - Time to Apply, How to Apply, Advice
    By sailnaegean in forum Permanent Residency and Naturalization
    Replies: 1
    Last Post: 03-20-2013, 08:35 PM
  3. Speeding Tickets: GPS as Speed Data in Court
    By lostintime in forum Moving Violations, Parking and Traffic Tickets
    Replies: 36
    Last Post: 04-13-2012, 04:30 PM
  4. Restrictive Covenants: Data Breach
    By sc employer in forum Employment and Labor
    Replies: 3
    Last Post: 09-23-2008, 08:13 PM
  5. Copyright Law: Compilations of Data
    By mzee3261 in forum Intellectual Property
    Replies: 3
    Last Post: 08-15-2007, 08:03 AM
 
 
Sponsored Links

Legal Help, Information and Resources