Something I've always wondered about this. Surely our obligation under MLR to keep up to date risk assessments of our clients overrides the amount and type of data we keep or allow our clients access to amend, under Data Protection? Or have I missed a vital point?
__________________
my blog "the bookkeeper's in town - learning the hard way"
You can charge for this, and it can be presented, rather than a direct screen print, so for example, if you hold their address on Sage and in a customer database, you only need to list the address under details kept, and then list both systems under how it is kept and processed.
It is new rules rather than just the current ones, where bookkeepers either do or don't need to register depending on what they do. Either way, it needs encrpyting.