Data Protection Act 1998

The text of DPA 1998 contains six major sections called Parts, followed by 16 explanatory notes called Schedules. The Parts outline the basic rights of data subjects, methods in which data may be handled by those who possess it, special exemptions and modes of enforcement. The Schedules explain the Parts in greater detail and elaborate on diverse contingencies and legal interpretations.

The fundamental principles of DPA 1998 specify that personal data must:

• be processed fairly and lawfully.
• be obtained only for lawful purposes and not processed in any manner incompatible with those purposes.
• be adequate, relevant and not excessive.
• be accurate and current.
• not be retained for longer than necessary.
• be processed in accordance with the rights and freedoms of data subjects.
• be protected against unauthorized or unlawful processing and against accidental loss, destruction or damage.
• not be transferred to a country or territory outside the European Economic Area unless that country or territory protects the rights and freedoms of the data subjects.

Getting started with the Data Protection Act 1998

To explore how DPA 1998 is used in the enterprise, here are some additional resources:

The 'appropriate' way to comply with Data Protection Act 1998: Are you compliant with the U.K. Data Protection Act? Meeting the standards can be a challenge, and even though all companies should be compliant, some aren't. Get information on the regulation's eight principles and learn how to comply.

Complying with the UK Data Protection Act of 1998: Learn about the basic requirements of the U.K. Data Protection Act of 1998 and the minimum every organization should do in terms of data storage and protection to comply.

Read more about Data Protection Act 1998: - The Office of Public Sector Information provides the full text of DPA 1998. - Out-law.com offers a checklist for DPA compliance.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Mimosa NearPoint module automates email retention, data classification New automated retention and classification features in Mimosa Systems NearPoint platform help storage administrators manage email without instituting... Compliance FAQ Guide How much should storage managers invest to adhere to compliance procedures? In this podcast, analyst Jon Collins answers that question and others... Blade storage vendor rolls out object-based clustered storage Verari partners with Caringo to compete with EMC and Bycast into the developing object-based storage market.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary Freedom of Information Act 2000  (SearchStorageUK.com) The Freedom of Information Act 2000 is an act of the United Kingdom (UK) Parliament defining the ways in which the public may obtain access to... Information Commissioner's Office (ICO)  (SearchStorageUK.com) The Information Commissioner's Office (ICO) is an independent authority in the UK that promotes openness of public information and protection of...