Confidential Waste Destruction and Data Protection Act
From 1st March 2000, information held in manual files and computer files such as discs and CDs relating to living individuals must be controlled, maintained and disposed of in a secure manner.
The act also covers a new range of data which may be stored about a person. This includes their ethnic origin, religious beliefs, physical or mental health and criminal offences. It has been introduced to bring greater protection to individuals in the processing of their personal data. To know more, contact the Data Protection Commissioner on 01625 545745 or at www.dataprotection.gov.uk.
Data Protection principles
The Data Protection Act 1998 establishes the following 8 principles in relation to the processing (ie management) of personal data
- Personal data should be processed fairly and lawfully.
- Data should only be obtained for specified purposes and should not be further processed in a manner incompatible with these purposes.
- Personal data should be adequate relevant and not excessive in relation to the purposes for which they were collected.
- Personal data should be accurate and where necessary kept up to date.
- Personal data should not be kept longer than is needed for its intended purpose.
- Personal data should be processed in accordance with the rights of the individual which the information concerns.
- Appropriate measures should be taken against unauthorised or unlawful processing or destruction of personal data.
The consequences of prosecution:
- Minimum £5000 fine; maximum - unlimited
- Directors get a Criminal Record
- Civil Action by the data subject
- All costs awarded against your company
- Directors will be barred and unable to apply to trade associations.
- Possible visit by commissioners office, with the power to shut your business down without notice
