Data Protection Act
Data stored about an individual is personal data.

Each of us has a lot of personal information stored about us - birth; marriage; employment; bank details; driving details; taxes; etc...

Safeguards to help prevent the misuse of files of personal data include...

  • password system of access
  • access to files should be audited - details of who accessed the files and when.

Computer users who store personal data must register with the Data Protection Register.

The organisation storing the data has obligations...

  • not to store or process data other than for a lawful purpose
  • to obtain and process data fairly and lawfully
  • to store only data that is relevant to the stated purpose
  • not to infringe the rights of the data subject
  • to make sure the data is accurate and up-to-date
  • not to hold the data longer than necessary.
  • to protect the data with the proper security.
  • not to send the data abroad other than to EU countries

The individual whose data is stored has rights...

  • to view data stored
  • to have data corrected or erased.
  • to be compensated for damage or distress caused by unlawful processing of data

Exemptions from the Data Protection Act :

  • data used for home use or recreational purposes eg club members
  • data which may affect national security
  • data used to fight crime
  • data used for calculating wages, pensions or tax
  • data used for distributing information eg mailing lists