top
shadow

Confidentiality Guidelines

 

Data Protection Act

The Data Protection Act 1998 came into force in March 2000. Its purpose is to protect the right of the individual to privacy with respect to the processing of personal data. The Act laid down eight data protection principles:

  1. Data must be processed fairly and lawfully.
  2. Personal data shall be obtained only for one or more specific and lawful purposes.
  3. Personal data shall be adequate, relevant and not excessive in relation to the purpose(s) for which they are processed.
  4. Personal data shall be accurate and where necessary kept up to date.
  5. Personal data processed for any purpose(s) shall not be kept for longer than is necessary for that purpose.
  6. Personal data shall be processed in accordance with the rights of data subjects under the 1998 Data Protection Act.
  7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
  8. Personal data shall not be transferred to a country outside the EEA, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

 

shadow
Base

DISCLAIMER: This site is currently under construction: its content and links may not be accurate.