Chapter 9 - Security of Data

Chapter 9 - Security of Data

1. Data Protection Act

   • 1. Data must be obtained and kept within law. The Data Controller must register with the Data Commissioner and must ask the Data Subject for permission for data to be used
   • 2. The Data Controller must only use the data for the purpose he asked permission for
   • 3. The data must be relevant and not excessive; the Data Controller must not collect more information than is necessary for his purposes
   • 4. The data must be accurate and kept up to date
   • 5. The data should not be kept for longer than necessary
   • 6. The Data Subject must be allowed to look at the data and it must be kept in accordance with his rights
   • 7. The data must be kept securely so that only people who are allowed to access it are able to do so
   • 8. Data can only be used within the EU unless another country has similar data protection laws to the EU's

2. Loyalty Cards

   • Businesses can store lots of information about people through loyalty cards
   • They can then target people by sending them specific adverts using the information they know about them
   • For example if a supermarket knows that people are vegetarians then they won't send them adverts for meat