UK Data Protection Act 1998 (DPA 1998)

U.K. Data Protection Act 1998 (DPA 1998) - The Data Protection Act 1998 (DPA 1998) is an act of the United Kingdom (UK) Parliament defining the ways in which information about living people may be legally used and handled. The main intent is to protect individuals against misuse or abuse of information about them. The DPA was first composed in 1984 and was updated in 1998.

The text of DPA 1998 contains six major sections called Parts, followed by 16 explanatory notes called Schedules. The Parts outline the basic rights of data subjects, methods in which data may be handled by those who possess it, special exemptions and modes of enforcement. The Schedules explain the Parts in greater detail and elaborate on diverse contingencies and legal interpretations.

The fundamental principles of DPA 1998 specify that personal data must:

   * be processed fairly and lawfully.
   * be obtained only for lawful purposes and not processed in any manner incompatible with those purposes.
   * be adequate, relevant and not excessive.
   * be accurate and current.
   * not be retained for longer than necessary.
   * be processed in accordance with the rights and freedoms of data subjects.
   * be protected against unauthorized or unlawful processing and against accidental loss, destruction or damage.
   * not be transferred to a country or territory outside the European Economic Area unless that country or territory protects the rights and freedoms of the data subjects.

Related glossary terms: Information Commissioner's Office (ICO), Freedom of Information Act 2000, Electronic Commerce (EC Directive) Regulations 2002, MiFID (Markets in Financial Instruments Directive), EU Transparency Directive (European Union Transparency Directive), WEEE Directive (Waste Electrical and Electronic Equipment Directive)

[Category=Data Management ]

Source: WhatIs.com, 14 September 2013 09:27:07, http://whatis.techtarget.com/glossary/Data-and-Data-Management