Off the record

“We do have a group of people on the data protection committee who are drawn from the library, IT, marketing and HR. We have taken the position that when someone gives you their business card, they are consenting to it being used on a database. Consent is sought and given on a generic level.