Latest News

Data Protection Breaches - Recent Cases Data Protection Breaches - Recent Cases
EU Proposals for Data Protection Reform EU Proposals for Data Protection Reform
Parent Company Liable in Landmark Asbestos Case Parent Company Liable in Landmark Asbestos Case
Competition - New Market Investigation Competition - New Market Investigation
Companies Take Note - Dividends Can Be Proceeds of Crime Companies Take Note - Dividends Can Be Proceeds of Crime
Court Protects Wind Farmer When Board Freezes Him Out Court Protects Wind Farmer When Board Freezes Him Out
Budget Summary 2012 - Business Budget Summary 2012 - Business
Who Gives You Advice is Important Who Gives You Advice is Important
OFT Rejects Predatory Pricing Claim OFT Rejects Predatory Pricing Claim
Commerciality the Key in Contract Interpretation Commerciality the Key in Contract Interpretation

The Eight Data Protection Principles

Anyone processing personal data must comply with the eight enforceable principles of good practice. Here is a checklist.

Data must be:

  • fairly and lawfully processed;
  • processed for limited purposes;
  • adequate, relevant and not excessive;
  • accurate;
  • not kept longer than necessary;
  • processed in accordance with the data subject's rights;
  • secure; and
  • not transferred to countries without adequate protection.

Personal data covers both facts and opinions about the individual. It also includes information regarding the intentions of the ‘data controller’ towards the individual, although in some limited circumstances exemptions will apply. Where personal data is concerned, the definition of ‘processing’ becomes very wide. For example, it incorporates the concepts of ‘obtaining, holding and disclosing’ data.

The Office of the Information Commissioner has now published a consolidated version of the guidance on data protection issues in employment. This brings together the four existing guides on recruitment and selection, employee records, monitoring at work and medical information and is intended to provide employers with a complete manual on data protection in the workplace.

The contents of this article are intended for general information purposes only and shall not be deemed to be, or constitute legal advice. We cannot accept responsibility for any loss as a result of acts or omissions taken in respect of this article.