Data Protection

Question 1

What are the principles of the Data Protection Act 1998?

Answer 1

• lawfully processed for relevant purpose
• Processed only for relevant purposes
• necessary and not excessive to hold
• up to date
• Not kept longer than necessary
• Processed in line with the data subject rights
• Kept securely
• Not transferred to countries with different data protection laws.

Question 2

Who polices the DPA 1998? And what is the penalty?

Answer 2

Information Commissions Office (ICO)

Penalty is a fine - £500k max

Question 3

What is your company doing about GDPR?

Answer 3

TBC

Question 4

When does GDPR come into force?

Answer 4

25 May 2018 (next Friday)

Question 5

What are the key requirements of GDPR?

Answer 5

• Conduct data protection impact assessment
• Rights for individuals to have access to information held and to have it erased.
• data accountability - organisations have to prove how they are complying with the new regulations.
• Security breaches will need to be reported to ICO
• Max fine of €20m or 4% global turn over