Security of Data

Security of Data

1. The Data Protection Act

   • 8 Principles of the Data Protection Act
     • 1) Must be obtained and kept within the law
     • 3) Data must be relevant and not excessive; the Data Controller must not collect more information than it is necessary for his purposes
     • 8) Data can only be used within the European Union unless another country has similar data protection laws to the EU's
     • 7) The data must be kept securely so only people who are able to access it are able to do so
     • 6) Data Subject must be allowed to look at the data and it must be kept in accordance with his rights
     • 2) Data controller must only use the data for the purpose he asked permission for
     • 4)The data must be accurate and up to date
     • 5)Data should not be kept for longer than necessary
   • Provides rules that people or organisations which store information about living people must follow
   • Set in 1998

2. Storing Data securely

   • Using passwords
   • Firewalls
   • Screen savers
   • Encryption
   • Virus Protection

3. Loyalty Cards

4. Data Subject

5. Data Controller