lo3 - data protection act 1998 Flashcards
what is the policy that goes with the data protection act?
confidentiality policy, guidance on following the law. staff are working to the same standards required.
what are the 7 different elements of the data protection act?
- processed fairly and lawfully.
- used only for the purpose for which it was intended
- adequate and relevant but not excessive
- accurate and kept up to date.
- kept for no longer that necessary
- processed within the rights of the individual
- secure
what is meant by Processed fairly and lawfully?
- Collected only with individuals permission
- Only shared on a ‘need to know’ basis
what is meant by using only for the purposes for which it was intended?
- Only gathered for a specific and necessary purpose
- Only used for that purpose
what is meant by Adequate and relevant but not excessive?
Only collect and use information that is needed
what is meant by Accurate and kept up to date?
- Inaccurate data should be destroyed or corrected
- Care workers are responsible to ensure information is correct
what is meant by keeping information no longer than is necessary?
Information should be deleted or destroyed (e.g. shredding) when no longer needed.
what is meant by Processed within the rights of the individual?
People have a right to:
1. know if info is held about them
2. See that information
3. Know how the info will be used
4. Prevent it’s use for marketing/ advertising
5. Have any errors corrected
what is meant by making sure the information is secure?
- Non-authorised people not allowed access to information
- Information should be kept in secure conditions
- Guidelines in place to show who has access to information
- Organisation should have a confidentiality policy