Data Protection Act (1998) Flashcards
Data Protection Act
Sets out the requirements for the control of stored data
Role of data subject, data controller, information commissioner.
Data subject- individual who is the subject of the personal data
Data Controller- Person in a business responsible for controlling the way data is processed
Information Commissioner- Enforces the act and make the public aware of their rights under this act
What must the data controller notify the commissioner of?
- What data they hold
- Why they have it
- What they will use it for
What rights do the data subjects have?
Can:
ask for a copy of any data held
have the data changed if incorrect
compensation if the organisation doesn’t comply
List some principles of the data protection act
Data should only be used for the specified purpose
Data should be accurate
Data shouldn’t be kept unnecessarily