Data Protection Act 1998

What is the DPA?
1. The DPA is a law covering personal data held by a business or organisation
  1. Personal Data is data that can be used to identify a living person from specific details
2. It was created to control the storage and usage of the data, and to protect individuals (data subjects) from misuse and unintended purposes
What are the 8 principles?
1. Data must be...
  1. Fairly and lawfully processed
  2. Processed for limited purposes
  3. Adequate, relevant and not excessive
  4. Accurate and up to date
  5. Not kept for longer than is neccessary
  6. Processed in line with your rights
  7. Secure
  8. Not transferred to other countries without adequate protection
What rights do data subjects have?
1. See what data is being held about you and be provided with a copy
2. Have anything corrected that is inaccurate
3. Ask the organisation not to process the information if it might cause you damage or distress
4. Refuse to have your data used for direct marketing (junk mail)
5. Complain to the Information Commissioner if you think a data controller has broken the rules of the DPA
6. Claim compensation through courts if damage has been caused through broken rules
What people are involved in the DPA?
1. Data Subject
  1. A living individual that the data is based on
2. Data User
  1. The person that stores and accesses data
3. Data Controller
  1. The person responsible for compliance of the DPA
4. Information Commissioner
  1. The office in charge of the DPA in the Government
What exemptions are there from the DPA?
1. Where national security may be put at risk
2. Where information must be available to the public
3. Where information is for personal use within families
4. Where information is needed to prevent and detect crime
5. Where information is needed to collect taxes

Next up

Data Protection Act 1998

Description

Resource summary

Similar

	Created by jadepalmer98 over 10 years ago