[martinjwallace]

I have checked back over some material I have regarding the "Data Protection Act 1998" (enforcable since March 2000).

The act establishes a legal framework for a data subject to withdraw permission to hold, and process data, by a data processor.

It firmly states that a subject can request removal of data, and the processor has to comply with the request in a 'reasonable' timeframe. The act does not state what a reasonable timeframe is, but the data protection agency suggests 28 days.

The act states that if a processor refuses then the subject can claim compensation via the courts. There is provision for the processor to reject the request but this is only if the removal of data would 'create a life threatening situation' - this is really to cover Medical records.

The act goes on to specify that refusal on the basis that it would degrade the processors overall quality or marketablity of data is not a valid reason to decline.

The act covers any processor operating within the european union - how it effects those outside is beyond my ability to fathom - but I thought the above might be useful for those who do have forums that are in the union.

Food for though methinks. :smoke: