8 Principals of Data Protection
The 8 Principals of Data Protection
The Act regulates the use of “personal data”. To understand what this means we need first to look at how the Act works or defines the word “data”
Data means; information which- a) is being processed by operating automatically in response to instructions given for that purpose. b) Is recorded with the intention that it should be processed. c) Is recorded as part of a relevant filing system with the intention that it should form part of relevant filing system. d) Does not fall within paragraph (a) (b) or (c) but forms part of an accessible record as defined by section 68. e) Or is recorded information held by a public authority and does not fall within any of paragraphs (a) to (d).
The Data Protection Act requires you to process personal data fairly and lawfully. The main purpose of this principles is to protect the interest of individuals whose personal data is being processed the key to comply with the Data Protection is to follow the 8 data protection principals. PRINCIPAL 1
Personal Data should be processed fairly and lawfully and in particular shall not be processed unless – (a)at least one of the conditions in Schedule 2 is met and (b) in the case of sensitive personal data at least one of the conditions in Schedule 3 is also met.
In practise it means that you must first have legitimate grounds for collecting and using the personal data; not use the data in ways that have unjustified adverse effects on the individuals concerned; be transparent about how you intend to use the data, and give individuals appropriate privacy notices when collecting their personal data; handle people’s personal data only in ways they would reasonably expect and finally make sure you do not do anything unlawful with the data.
EXAMPLE – Personal Data will be obtained fairly by the tax authorities if it is obtained from an employer who is under a legal duty to provide details of an employee’s pay, whether or
The Act regulates the use of “personal data”. To understand what this means we need first to look at how the Act works or defines the word “data”
Data means; information which- a) is being processed by operating automatically in response to instructions given for that purpose. b) Is recorded with the intention that it should be processed. c) Is recorded as part of a relevant filing system with the intention that it should form part of relevant filing system. d) Does not fall within paragraph (a) (b) or (c) but forms part of an accessible record as defined by section 68. e) Or is recorded information held by a public authority and does not fall within any of paragraphs (a) to (d).
The Data Protection Act requires you to process personal data fairly and lawfully. The main purpose of this principles is to protect the interest of individuals whose personal data is being processed the key to comply with the Data Protection is to follow the 8 data protection principals. PRINCIPAL 1
Personal Data should be processed fairly and lawfully and in particular shall not be processed unless – (a)at least one of the conditions in Schedule 2 is met and (b) in the case of sensitive personal data at least one of the conditions in Schedule 3 is also met.
In practise it means that you must first have legitimate grounds for collecting and using the personal data; not use the data in ways that have unjustified adverse effects on the individuals concerned; be transparent about how you intend to use the data, and give individuals appropriate privacy notices when collecting their personal data; handle people’s personal data only in ways they would reasonably expect and finally make sure you do not do anything unlawful with the data.
EXAMPLE – Personal Data will be obtained fairly by the tax authorities if it is obtained from an employer who is under a legal duty to provide details of an employee’s pay, whether or