Data Protection Act

Data Protection Act

1. 8 principles of the Data Protection Act

   • Adequate, Relevant and not excessive
     • Irrelevant information must not be collected.
   • Processed For Limited Purposes
     • Organisations must only use the data for the specific reasons that was stated when collected.
   • Fair and Lawfully Processed
     • Data subject should be told who will process their information and why. Data should not be used for illegal purposes.
   • Not Transferred to Other Countries Without Adequate Protection
     • Data should nto be transferred to other countries.
       • Unless they have similar levels of data protection as the UK.
       • All data can be transferred in the EU.
   • Secure
     • Data should not be made available to unauthorised users.
       • Includes dat stored on laptops and storage disks.
   • Processed in Line With Your Rights
     • If you change your mind about the organisation using your data it must comply.
   • Not Kept For Longer than is Necessary
     • Data that is no longer needed must be deleted.
   • Accurate and up-to-date
     • Organisations must ensure data is correct and they must change any mistakes.