Zusammenfassung der Ressource
Data Protection Act 1998
- What is the DPA?
- The DPA is a law covering
personal data held by a business
or organisation
- Personal Data is data that can be
used to identify a living person from
specific details
- It was created to control the storage
and usage of the data, and to protect
individuals (data subjects) from
misuse and unintended purposes
- What are the 8 principles?
- Data must be...
- Fairly and lawfully processed
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate and up to date
- Not kept for longer than is neccessary
- Processed in line with your rights
- Secure
- Not transferred to
other countries
without adequate
protection
- What rights do data subjects have?
- See what data is being held
about you and be provided with
a copy
- Have anything
corrected that is
inaccurate
- Ask the organisation not to
process the information if it
might cause you damage or
distress
- Refuse to have your data
used for direct marketing
(junk mail)
- Complain to the Information
Commissioner if you think a
data controller has broken the
rules of the DPA
- Claim compensation through
courts if damage has been
caused through broken rules
- What people are involved in the DPA?
- Data Subject
- A living individual that the
data is based on
- Data User
- The person that stores and
accesses data
- Data Controller
- The person responsible
for compliance of the
DPA
- Information Commissioner
- The office in charge of the DPA in
the Government
- What exemptions are there from the DPA?
- Where national security may
be put at risk
- Where information must be
available to the public
- Where information is for
personal use within
families
- Where information is needed to
prevent and detect crime
- Where information is
needed to collect taxes