Handling Data
When handling, collecting, processing or storing personal data, ensure that:
a) all personal data is both accurate and up to date
b) errors are corrected effectively and promptly
c) the data is deleted/destroyed when it is no longer needed
d) the personal data is kept secure at all times (protecting from unauthorised disclosure or access)
e) the Data Protection Act is considered when setting up new systems or when considering use of the data for a new purpose. Note that this may affect the existing registration with the Data Protection Authority
f) written contracts are used when external bodies process/handle the data explicitly specifying the above requirements with respect to the data
It is equally important NOT to:
a) access personal data that you do not need for your work
b) use the data for any purpose it was not explicitly obtained for
c) keep data that would embarrass or damage YOUR-COMPANY if disclosed (eg: via a subject access request – see below)
d) transfer personal data outside of the European Economic Area unless you are certain you are entitled to or consent from the individual concerned has been obtained
e) store/process/handle sensitive personal data (see below) unless are certain you are entitled to or consent from the individual concerned has been obtained
Front Page
|
