INTERNATIONAL COMPONENTS TERMS AND CONDITIONS
DATA PROTECTION ACT
The Data Protection Act 1998 came into force on 1 March 2000. It sets rules for processing personal information and applies to paper records as well as those held on computers. Anyone processing personal data must comply with the eight enforceable principles of good practice. They say that data must be:
Fairly and lawfully processed for limited purposes
Adequate, relevant and not excessive
Not transferred to countries without adequate protection
Not kept longer than necessary
Processed in accordance with the data subject's rights
Secure Accurate
Personal data covers both facts and opinions about the individual. It also includes information regarding the
intentions of the data controller towards the individual, although in some limited circumstances exemptions will apply. With processing, the definition is far wider than before. For example, it incorporates the concepts of 'obtaining', 'holding' and 'disclosing'.
A full explanation of the principles of Data Protection is available at www.dataprotection.gov.uk