Data Protection Act

year
1. Why was it introduced then?
Short Summary of what it does/who does it affect or protect
8 Principles in the Act / Law
1. 1. Personal data should be obtained and processed fairly and lawfully
2. 2. Personal data can be held only for specified and lawful purposes.
3. 3. Personal data should be adequate, relevant and not excessive for the required purpose.
4. 4. The personal data should be accurate and kept up-to-date.
5. 5. The personal data should not be kept for longer than is necessary for the purpose for which it is collected.
6. 6. Data must be processed in accordance with the rights of the data subjects. This gives individuals the right to inspect the information held on them.
7. 7. Appropriate security measures must be taken against unauthorised access.
8. 8. Personal data cannot be transferred to countries outside the European Union unless the country provides an adequate level of protection.
9. add a brief summary to each of the principles explaining what it means and the issues that there may be
Why is this relevant to our case study?
Specific Roles/people involved Expand on each
1. Data Controller
2. Information Commissioner
3. Data Subject
4. Data User
Fines and sanctions for breaking this Act / Law
What Rights do Data Subjects have under this act?
1. 1.
2. 2.
3. 3.
4. 4.
5. 5.
6. 6.

Resource summary

	Created by acherm over 10 years ago