Data Protection Act 1998

Data Protection Act 1998

1. covers all personal data

   • age
   • gender
   • address
   • passwords/usernames
   • Religous Beliefs
   • Credit History
   • name
   • Personal Data - data that can Identify a person

2. Key Terms

   • Data subject
     • the person the data is about
   • Data commissioner
     • in charge of the whole act throughout the UK
   • Data Controller
     • Perason who controls the data in organisations
   • Information Commissioner - The government department that enforces the DPA

3. 8 Principles of the DPA

   • Data must be fairly and lawfully processed
   • Must be processed for a limited purpose
   • Must be adequate, relevant and not excessive
   • Must be accurate and up to date
   • Must not be kept for longer than necessary
   • Must be porcessed in line wiht your rights
   • Must be kept secure
   • Must not be shared wiht third party

4. Rights as a data subject

   • To correct any false data
   • See your data
   • Claim compensation if the misuse of your data brings you damage
   • Ask the organisation not to process your data
   • Complain to the information commissioner if you think the data user is not complying with the DPA

5. Exemptions

   • Organisations that do not have to abide by the DPA
   • The Police
   • the government
   • Where national security is in threat
   • When information must be available to the public
   • Where information is for personal use with famalies
   • Where information is needed to prevent and detect crime

6. Information Commissioner

   • An organisation must register with the IC before they are allowed to hold personal information
   • Must state what information the will hold