What are the key points of the Data Protection Act 1998?

The Data Protection Act 1998 was an act of Parliament designed to protect personal data stored on computers or in organised paper filing systems. It enacted the EU Data Protection Directive, 1995’s provisions on the protection, processing and movement of personal data.

What are the 8 points of the Data Protection Act?

The Eight Principles of Data Protection

• Fair and lawful.
• Specific for its purpose.
• Be adequate and only for what is needed.
• Accurate and up to date.
• Not kept longer than needed.
• Take into account people’s rights.
• Kept safe and secure.
• Not be transferred outside the EEA.

How do I reference the Data Protection Act 1998?

MLA (7th ed.) Mullock, James, and Piers Leigh-Pollitt. The 1998 Data Protection Act. London: Stationery Office, 2000.

What are the three requirements of the Data Protection Act?

Data Protection Act principles Be obtained and processed fairly, lawfully and transparently. Be processed for specified explicit and lawful purposes and shall not be processed in any manner incompatible with these purposes. Be adequate, relevant and not excessive for those purposes.

What are the 7 key principles of the Data Protection Act?

At a glance

• Lawfulness, fairness and transparency.
• Purpose limitation.
• Data minimisation.
• Accuracy.
• Storage limitation.
• Integrity and confidentiality (security)
• Accountability.

What is sensitive personal data?

personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs; trade-union membership; genetic data, biometric data processed solely to identify a human being; health-related data; data concerning a person’s sex life or sexual orientation.

Is Data Protection Act 1998 still valid?

It was superseded by the Data Protection Act 2018 (DPA 2018) on 23 May 2018. The DPA 2018 supplements the EU General Data Protection Regulation (GDPR), which came into effect on 25 May 2018. The GDPR regulates the collection, storage, and use of personal data significantly more strictly.

What is not a personal information?

Non-Personal Information means and includes any information that does not reveal your specific identity, such as, browser information, information collected through Cookies (as defined below), pixel tags and other technologies, demographic information, crash reports, system activity, device state information etc.

What are examples of sensitive personal data?

What personal data is considered sensitive?

• personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs;
• trade-union membership;
• genetic data, biometric data processed solely to identify a human being;
• health-related data;

What happens if you breach the Data Protection Act 1998?

Fines. The Information Commissioner has the power to issue fines for infringing on data protection law, including the failure to report a breach. The specific failure to notify can result in a fine of up to 10 million Euros or 2% of an organisation’s global turnover, referred to as the ‘standard maximum’.

What are the 7 golden rules of information sharing?

Necessary, Proportionate, Relevant, Adequate, Accurate, Timely and Secure. Ensure the information you share is necessary for the purpose for which you share it. You should share it only with those people who need to have it, your information is accurate, up-to-date, shared in a timely fashion and also shared securely.

Is a phone number personal data?

For example, the telephone, credit card or personnel number of a person, account data, number plate, appearance, customer number or address are all personal data. Since the definition includes “any information,” one must assume that the term “personal data” should be as broadly interpreted as possible.

What personal data is considered sensitive?

Definition under the GDPR: data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.