The act was updated in 1998 to bring it up to data with European legislation and to include other security measures e.g. sending information over the internet.

 

It also follows 8 principles. These can be found in room 9 on the display wall.

 

8 Data protection Act

1. Personal Data must be processed fairly and lawfully.

 

2. Personal data shall be obtained only for one or more specified and lawful purposes.

 

3. Personal data shall be adequate, relevant and not excessive.

 

4. Personal data shall be accurate and, where necessary, kept up-to-date.

 

5. Personal data shall not be kept for longer than is necessary.

 

6. Personal data shall be processed in accordance with the rights of the data subjects.

 

7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental lost.

 

8. Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of protection.

 

Gives rights to data subjects (i.e. people who have data stored about them on a computer). Information is collected about people for a large number of things. It is important that information is kept private and is only used for its intended purposes.

 

Organisations must register with the Data Protection Commissioner if they want to store information about people.  They must explain the following:

• Who they are

• What data they want to collect

• What they will do with the data

• Say who will have access to the data