518444
Description
Mind Map by 08aliso.burge, updated more than 1 year ago
|
Created by 08aliso.burge
over 10 years ago
|
|
Data
Protection
Acts 1988
& 2003
- Rights of Data Subjects
- Access - Subjects have the
right to know how much
and what type of
information is being kept on
file about them by an
organisation and what it is
being used for. They are
entitles to a full copt of this
information within 40 days
of asking for it
- Correction of errors - Subjects are entitled
to have inaccurate data about themselves
deleted or corrected. Members of the public
also have the right to have their names
removed from any direct marketing mailing
lists. Data controllers must comply with such
written requests within 40 days.
- Compensation - Subjects
have the right to
compensation where
inaccurate information
causes harm, such as
denying you a loan or a
promotion. They are also
entitled to make complaint
to the Data Protection
Commissioner if they are
concerned that the law in
this area has been broken
- Automated Decision
Making - Individuals are
entitled to have human
input into the making of
important decisions
relating to them. The
must not be subjected
to Automated Decision
Making
- Access - Subjects have the
right to know how much
and what type of
information is being kept on
file about them by an
organisation and what it is
being used for. They are
entitles to a full copt of this
information within 40 days
of asking for it
- Responsibilites of Data Controllers
- Information must
be obtained fairly
and openly and
used only for the
specific purpose
for which it was
given.
- Information must be
stored securely and
protected against
unauthorised
access or theft.
- Information kept must
be accurate, kept upto
date and is only held
as long as it is
needed.
- Information must
be obtained fairly
and openly and
used only for the
specific purpose
for which it was
given.
- Data Protection Commissioner
- Provide
information to
the public
about the Act
- Maintain a
register of all
organisations
that may hold
sensitive
information
about members
of the public
- Help businesses
develop codes of
practice to help
them keep within
the law.
- The DPC can investigate
complaint from the public about
businesses that may be
breaking the law. He can force
controllers to give away
information he needs to carry out
his duties but giving the
controller a written information
notice. It is an offence not to
comply with the information
notice.
- Provide
information to
the public
about the Act
Want to create your own Mind Maps for free with GoConqr? Learn more.