INTERNATIONAL COMPONENTS TERMS AND CONDITIONS

DATA PROTECTION ACT


The Data Protection Act 1998 came into force on 1 March 2000. It sets rules for processing personal information and applies to paper records as well as those held on computers. Anyone processing personal data must comply with the eight enforceable principles of good practice. They say that data must be:

Fairly and lawfully processed for limited purposes
Adequate, relevant and not excessive 
Not transferred to countries without adequate protection
Not kept longer than necessary 
Processed in accordance with the data subject's rights
Secure Accurate

Personal data covers both facts and opinions about the individual. It also includes information regarding the
intentions of the data controller towards the individual, although in some limited circumstances exemptions will apply. With processing, the definition is far wider than before. For example, it incorporates the concepts of 'obtaining', 'holding' and 'disclosing'.

A full explanation of the principles of Data Protection is available at www.dataprotection.gov.uk