Encryption
obtain the renewal of an authorization, do not include a technical part.The latter is replaced by a written statement of the person depositing the file certifying either that the impossibility for the means or the service to ensure the functions of confidentiality does not result from a simple locking mechanism, or that the design features of the means or service are unchanged compared to the description appearing in the technical part of the file deposited u p o n the first delivery of the authorization. Art. 2. - - Any change likely to modify the contents of the file of declaration or request for authorization is to be com-
Policy-
France
municated to the Central Service of Information System Security, at least a m o n t h in advance. Art. 3. - - The Decree of 13 March 1998, setting forth the form and the contents of the file relating to declarations or requests for authorization relating to the means and services for cryptology, is repealed. Art. 4. - - The Secretary-General of National Defense is responsible for the performance of this decree, which will be pubfished in the Journal Officiel de la Rdpublique franfaise. Signed in Paris, 17 March 1999. Lionel Jospin
Book Review The New Data Protection Act In September 1998, the British Bankers Association produced its guidance o n the n e w Data Protection Act. It was written a m o n t h before the publication by the Data Protection Registrar of her 'Introduction to the New Act' (which addresses some of the key areas of uncertainty) but is still very helpful. For example, it contains a table which shows the major differences b e t w e e n the 1984 Data protection Act, the 1995 Data Protection Directive and the Data Protection Act 1998. It also seeks to include a column, in that table, of the likely impact of 1998 changes, and w h e t h e r they are 'small', 'medium' or 'substantial'. It focuses on changes to the data protection principles: transfers of data; the definition of data; the definition of processing; the criteria for fair and lawful processing; subject access and direct marketing as the areas where changes are substantial. Each part of the publication has, at the end, a section entitled 'Practical Issues for Banks to Consider' (but they are of much wider interests than solely for banks). At the end of the publication is a summary of all the practical issues for banks to consider which constitutes a very useful three page summary of key bullet points. The publication also, usefully, has b o u n d into the back of it a copy of the Act itself.At the back of the d o c u m e n t is a bibliography of publications, primarily from the Data Protection Registrar's Office and from Hansard, where one can look for more information about data protection. The d o c u m e n t is certainly very helpful for banks, but should be of interest for other financial services companies and, indeed, companies generally. The publication may be purchased from the British Bankers' Association, Pinners Hall, 105-108 Old Broad Street, London, EC2M 1EX; Tel: +44 171 2168800 or Fax: +44 171 2168811. Heather Rowe, Report Correspondent, LoveR White Durrant
Book Review Intellectual Property for Libraries Copyright for Library and Information Service Professionals, by Paul Pedley, 1998, soft-cover, The Association for Information Management (ASLIB), 64 pp., £12.50, ISBN 085142412 0 This text forms part of a series of short practical guides on how to deal with, and resolve, issues of current interest or c o n c e r n to those working or teaching in the field of library and information services.This latest text has b e e n prepared by Paul Pedley, who is Libararian and Information Service Manager at the city law firm Theodore Goddard.This text focuses on the changing copyright regime that applies to libraries. Copyright law has undergone substantial change in the past decade to accommodate n e w provisions from the European Union.This text embraces these developments, as well as others that arise from changing to the Berne Convention, following the World Intellectual Property Organization's Copyright Treaty, and the agreement on trade related aspects of intellectual property rights, which arose out of the trade talks u n d e r the auspices of the general agreement on tariffs and trade. The book is written in a straightward manner, aimed specifically at information professionals who hold the responsibility for ensuring copyright compliance within their organization. Following the introduction, which includes the context in which copyright applies to libraries, there are sections dealing with user permissions; licensing schemes; electronic copying and digital use of copyright material; UK legislation; EU documents; international treaties; case law; and case studies on the application of copyright in the work environment. The work is completed with a series of references, further reading, and addresses and Web sites of useful organizations. Available from: Portland Press Ltd, Commerce Way, Whitehall Industrial Estate, Colchester, CO2 8HP; Tel: +44 1206 796351 or Fax: +44 1206 799331, E-mail:
[email protected].
Computer Law & Security Report Vol. 15 no. 4 1999 ISSN 0267 3649/99/$20.00 © 1999 Elsevier Science Ltd. All rights reserved
237