The Data Protection Act 1998 governs the use of personal information by businesses and other organisations. If you use personal information as part of your business, for example, because you hold customer details or employee details, you will need to comply with it. The Data Protection Act governs the use of personal information through the eight data protection principles.
These principles require that personal information is:
Processed fairly and lawfully
Processed for one or more specified and lawful purposes, and not further processed in any way that is incompatible with the original purpose
Adequate, relevant and not excessive
Accurate and, where necessary, kept up to date
Kept for no longer than is necessary for the purpose for which it is being used
Processed in line with the rights of individuals
Kept secure with appropriate technical and organisational measures taken to protect the information
Not transferred outside the European Economic Area
If you are required to comply with the Act, you have to notify the Information Commissioner you are processing information.
Our service for notification costs £50.00. Price includes £35 government fee. The period of notification is one year.