Data Protection Act

Data Protection Act

1. Protects the rights of the owners of data

   • Personal Data - any information about an individual, such as age, nationality etc
   • Data Subject - the person whose data it is
   • Data User - anyone who uses data as part of their job
   • Data Controller - person who needs to apply for permission to collect and store data
   • Information Commissioner - person who enforces the DPA

2. Principles of the Act

   • must be fairly processed
   • adequate, relevant and not excessive
   • must be accurate and up to date
   • not kept longer than needed
   • be kept secure
   • not transferred to countries without data protection