The Data Protection Act (1998)

  • Created by: Angharad
  • Created on: 01-05-10 16:57

The Data Protection Act (1998)

There is a requirement to register.

Data must be:

1. Obtained and processed fairly and lawfully.

2. Held for specified (limited) and lawful purposes.

3. Adequate, relevant and not excessive.

4. Accurate and up-to-date.

5. Not kept longer than necessary.

6. Processed in accordance with the data subject's rights.

7. Kept secure.

8. Not transferred to countries outside the EEA without adequate protection.

Data Subject’s


Miss Morgan


If you think you know the DPA, this is a great little test to check you know the required information.