Documente Academic
Documente Profesional
Documente Cultură
Data Protection
Welcome to your EduCare module on data protection.
This module gives an introduction to the Data Protection
Act 1998 and who it applies to, as well
as a guide to its overarching principles and what
organisations must do to comply with it. When the
Act was made law, many myths abounded about
what organisations could or could not do for fear of
infringing it and incurring sizeable penalties. When
you have completed this module, we hope that you
will see that most if it is common sense and typically,
most organisations will already have systems in place
that comply.
An Introduction to
Data Protection
3. Adequate, relevant and not excessive (when
compared with the purpose stated in the register, for
example, you must not collect more data than you
need to fulfil the task stated in the ICs register)
4. Accurate and, where necessary, kept up-to-date (for
example updating peoples names when they marry
or their addresses when they move house)
5. Not kept for longer than is necessary
(information can only be held for specified periods,
not indefinitely)
6. Processed in line with the rights of the individual
(people have a right to know what information is held
about them by organisations and they can ask to
see it. Individuals also have a right to prevent
organisations from using their personal details for
marketing purposes)
7. Kept secure (meaning backed up and protected from
unauthorised access)
8. Not transferred to countries outside the European
Economic Area unless the information is
adequately protected.
An Introduction to
Data Protection
Extra conditions for sensitive information
Charges
Information requests
When someone asks to see personal information an
organisation holds about them, it is called a Subject
Access Request.
Best practice
They can prevent the use of their data for sales and
marketing purposes
In Summary
No part of this material may be reproduced or utilised in any form or by any means,
electronic or mechanical, including photocopying, recording or by any information storage and
retrieval system without permission in writing by de Brus Marketing Services Ltd
(trading as EduCare).