, as it was obtained from database (bar) by official (baz) The transfer of John Doe's data from Bob Smith to Charles Dodgson, containing John Doe's location, which the arrest was based on, is therefore inadequate.
----------------------------------
The Privacy Act only permits data to be used for purposes explicitly enumerated at the point of database establishment. The arrest arrest-1 is not justified because John Doe's PNR record was used for the purposes of USC-11111 (Civil Law Enforcement), which was not one of the allowed uses (Counterterrorism, Intelligence). The transfer of information about John Doe's location from Bob Smith to Charles Dodgson, which the arrest was based on, is therefore inadequate. John Doe's PNR can only be used for purposes specified in SORN (foo), as it was obtained from database (bar).
Posted 2006-09-18 (Harvey Jones)