Data Protection Act 1998
The Data Protection Act 1998 (DPA) regulates the processing of personal data, that is information about and relating to, living identifiable individuals. The Act also gives individuals the right to access personal data that an organisation holds about them by making a Subject Access Request.
Companies controlling data are obliged to ensure that the processing of personal data is carried out in accordance with this legislation. These obligations are met by compliance with the eight data protection principles laid down in the DPA and ensuring that all processing is notified to the Information Commissioner.
Further information may be found by visiting the Information Commissioner’s Web site.