The Probert Encyclopaedia of Science & Technology

DATA PROTECTION

Data protection are safeguards relating to personal data in the UK, i.e. personal information about individuals that is stored on a computer. The principles of data protection, the responsibilities of data users, and the rights of data subjects are governed by the Data Protection Act (1984).
The principles of data protection include the following: (1) The information to be contained in personal data shall be obtained, and personal data shall be processed, fairly and lawfully. (2) Personal data shall be held only for specified and lawful purposes and shall not be used or disclosed in any manner incompatible with those purposes. (3) Personal data held for any purpose shall be relevant to that purpose. (4) Personal data shall be accurate and, where necessary, kept up to date. (5) Personal data held for any purpose shall not be kept longer than necessary for that purpose. (6) Appropriate security measures shall be taken against unauthorized access to, or alteration, disclosure, or destruction of personal data and against accidental loss or destruction of personal data.

Data users must register their activities with the Data Protection Registrar by means of a registration form obtained from a post office. This requires the data user to give: a description of the personal data it holds and the purposes for which the data is held; a description of the sources from which it intends or may wish to obtain the data or the information to be contained in the data; a description of any persons to whom it intends or may wish to disclose the data; the names or a description of any countries or territories outside the UK to which it intends or may wish directly or indirectly to transfer from data subjects for access to the data. A data user who fails to register is guilty of the offence of failing to register. An individual is entitled to be informed by any data user whether he holds personal data of which that individual is the subject. He is also entitled to obtain a printout from a registered data user of any personal data held by him and to demand that any inaccurate or misleading information is corrected or erased. If a court is satisfied on the application of a data subject that personal data held by a data user concerning him is inaccurate it may order the rectification or erasure of the data. Additionally it may order the rectification or erasure of any data held by the data user that contains an expression of opinion that appears to the court to be based on the inaccurate data.
Research Data Protection