What is the Data Protection Act?
The Data Protection Act 2003 was created to protect the rights of individuals and controls how your personal information is used by organisations, businesses or the government. The Act is relevant for businesses that manages information about individuals. So obviously it is of significant importance to us.
Everyone responsible for using data has to follow strict rules called ‘data protection principles’. They must make sure the information is:
- used fairly and lawfully
- used for limited, specifically stated purposes
- used in a way that is adequate, relevant and not excessive
- kept for no longer than is absolutely necessary
- handled according to people’s data protection rights
- kept safe and secure
- not transferred outside the UK without adequate protection