Data Protection Act Flashcards
State 4 principles of the data protection act
1 It must be collected and used fairly and inside the law.
2 Information must only be held and used for the reasons given to the Information Commissioner.
3 Information can only be used for the purpose you said you would use it for.
4 The information held must be adequate, relevant and not excessive when compared with the purpose stated in the register.
Name two steps you must take when collecting data
1 Only collect what you need
2 Seek permission to collect data
3 Ensure the data is correct
Name two steps you must take when storing data
1 Must be stored securely
2 Don’t pass it on to other people
3 Keep your records up to date
Data commissioner
The person who enforces the Data Protection Act
Data Controller
Decides what information to collect and process.
Data subject
Someone who has data stored about them outside their direct control.