Data Protection Act 1998
The Data Protection Act 1998 aims to promote high standards in the handling of personal information, and to protect the individual's right to privacy.
The DPA applies to anyone holding information about living individuals in electronic format and in some cases on paper. They must follow the eight data protection principles of good information handling.
The eight data protection principles
Personal information must be:
- Fairly and lawfully processed
- Processed for specified purposes
- Adequate, relevant and not excessive
- Accurate, and where necessary, kept up to date
- Not kept for longer than is necessary
- Processed in line with the rights of the individual
- Kept secure
- Not transferred to countries outside the European Economic Area unless there is adequate protection for the information.
The Data Protection Act 1998 gives individuals the right of access to information held about them by the Council. This type of request is known as a Subject Access Request, which must be made in writing and a charge of £10 is applicable. The Council must respond to a Subject Access Request within 40 calendar days.
If you wish to make a Subject Access Request, a standard form is available on our website to download, or you may complete an online form
Alternatively please contact our Data Protection Officer on 01536 534368, or at the address quoted above in order to obtain a form. We require proof of identification before a Subject Access Request is processed.
For further information regarding your rights under the Data Protection Act, please refer to the Information Commissioner's website
If you require any further information please call 01536 410333 or email email@example.com
Lasy updated: 22/08/2011