Anyone processing personal data must comply with the eight enforceable principles of good practice. Here is a checklist.
Data must be:
- Fairly and lawfully processed
- Processed for limited purposes
- Adequate, relevant and not excessive
- Not kept longer than necessary
- Processed in accordance with the data subject's rights
- Not transferred to countries without adequate protection
Personal data covers both facts and opinions about the individual. It also includes information regarding the intentions of the 'data controller' towards the individual, although in some limited circumstances exemptions will apply.
Where personal data is concerned, the definition of 'processing' becomes very wide. For example, it incorporates the concepts of 'obtaining, holding and disclosing' data.
The Office of the Information Commissioner has now published a consolidated version of the guidance on data protection issues in employment.
This brings together the four existing guides on recruitment and selection, employee records, monitoring at work and medical information and is intended to provide employers with a complete manual on data protection in the workplace.
The code of practice is available on the Information Commissioner's website.
Ready to sell your business? Sign up for a limited free trial on BusinessesForSale.com, sell your business and realise your wealth.
The contents of this article are intended for general information purposes only and shall not be deemed to be, or constitute legal advice. Neither BusinessesForSale.com nor Business Lawyers can accept responsibility for any loss as a result of acts or omissions taken in respect of this article.
This article was originally published on www.business-lawyers.org
Ready to sell? You are just 10 minutes away from advertising your business to 1.3 million prospective buyers. Sell your business today.