| Anyone processing personal data must comply with the eight enforceable principles of good practice. Here is a checklist. Data must be: - Fairly and lawfully processed
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate
- Not kept longer than necessary
- Processed in accordance with the data subject's rights
- Secure
- Not transferred to countries without adequate protection
Personal data covers both facts and opinions about the individual. It also includes information regarding the intentions of the ‘data controller’ towards the individual, although in some limited circumstances exemptions will apply. Where personal data is concerned, the definition of ‘processing’ becomes very wide. For example, it incorporates the concepts of ‘obtaining, holding and disclosing’ data. The Office of the Information Commissioner has now published a consolidated version of the guidance on data protection issues in employment. This brings together the four existing guides on recruitment and selection, employee records, monitoring at work and medical information and is intended to provide employers with a complete manual on data protection in the workplace. The code of practice is available on the Information Commissioner’s website.
The contents of this article are intended for general information purposes only and shall not be deemed to be, or constitute legal advice. Neither BusinessesForSale.com nor Business Lawyers can accept responsibility for any loss as a result of acts or omissions taken in respect of this article. This article was originally published on www.business-lawyers.org
| 
Argentina
France
Mexico
Spain
Australia
Germany
New Zealand
Sweden
Brazil
Greece
Poland
Thailand
Bulgaria
India
Portugal
UAE
Canada
Ireland
Singapore
UK
China
Israel
South Africa
USA
Cyprus
Malaysia
Worldwide
