Data Protection Act

Data Protection Act

1. year

   • Why was it introduced then?

2. Short Summary of what it does/who does it affect or protect

3. 8 Principles in the Act / Law

   • 1. Personal data should be obtained and processed fairly and lawfully
   • 2. Personal data can be held only for specified and lawful purposes.
   • 3. Personal data should be adequate, relevant and not excessive for the required purpose.
   • 4. The personal data should be accurate and kept up-to-date.
   • 5. The personal data should not be kept for longer than is necessary for the purpose for which it is collected.
   • 6. Data must be processed in accordance with the rights of the data subjects. This gives individuals the right to inspect the information held on them.
   • 7. Appropriate security measures must be taken against unauthorised access.
   • 8. Personal data cannot be transferred to countries outside the European Union unless the country provides an adequate level of protection.
   • add a brief summary to each of the principles explaining what it means and the issues that there may be

4. Why is this relevant to our case study?

5. Specific Roles/people involved Expand on each

   • Data Controller
   • Information Commissioner
   • Data Subject
   • Data User

6. Fines and sanctions for breaking this Act / Law

7. What Rights do Data Subjects have under this act?

   • 1.
   • 2.
   • 3.
   • 4.
   • 5.
   • 6.