The Data Protection Act works in three ways:
- It states that anyone who processes personal information must comply with eight principles;
- It requires anyone who processes personal information to notify the Information Commissionerr; and
- It provides individuals with important rights, including the right to find out what personal information is held about them.
What do the Eight Principles require us to do?
We are required to make sure that personal information held is:
- Fairly and lawfully processed
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate and up to date
- Not kept for longer than is necessary
- Processed in line with your rights
- Not transferred to other countries without adequate protection