Data Protection Act

Question 1

What is the data protection act?

Answer 1

The storage of personal information on computers in many organisations has implications both for the individual and for the organisations that use the information. There is a need to control what is stored in the interests of protecting individuals and their privacy

Question 2

Key people

Answer 2

Data controller- person in a company is responsible for controlling the way in which data is processed

Data subject- the individual who is the subject of the personal data; can prevent processing of their data if it is inaccurate; may receive compensation for loss of their data or unauthorised disclosure

Information commissioner- responsible for enforcing the act promoting good practice from those people responsible for processing personal data and making the general public aware of their rights under the act

Question 3

Principals (4)

Answer 3

Personal data should be processed fairly and lawfully

Personal data should be accurate and up to date

Personal data should not be transferred outside the EU

Personal data should not be kept for longer than necessary