Data Protection Act

The Data Protection Act makes provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.

The Eight Principles of the Data Protection Act

Personal information must be fairly and lawfully processed.
Personal information must be processed for limited purposes.
Personal information must be adequate, relevant and not excessive.
Personal information must be accurate and up to date.
Personal information must not be kept for longer than is necessary.
Personal information must be processed in line with the data subject's rights.
Personal information must be secure.
Personal information must not be transferred to other countries without adequate protection.

For Organisations

The Data Protection Act requires all organisations that handle personal information to comply with a number of important principles regarding privacy and disclosure, including abiding by the above eight principles.

For Individuals

The Act gives individuals rights over their personal information and allows them to find out what personal information is held about them by making a subject access request. This covers information held electronically and in some paper records, and includes credit reference details.

GO Soft