Data Protection Act 1998

The Data Protection Act 1998 received Royal Assent in July 1998 and came into force on 1 March 2000 giving effect to the EU Data Protection Directive 95/46/EC The Act gives rules for the way organisations must treat personal data and information which apply to paper as well as electronic records These rules are mandatory for all organisations that hold or process personal data in the public as well as private and voluntary sector The Act contains eight Data Protection Principles stating that all data must be processed fairly and lawfully obtained amp used only for specified and lawful purposes adequate relevant and not excessive accurate and where necessary kept up to date kept for no longer than necessary processed in accordance with the individuals rights kept secure transferred only to countries that offer adequate protection