What is covered by data protection act 1998?

Answer 1

- Data has to be kept well secure

-Data isn't allowed to be transferred to any country outside the EU, without similar legislation

-It allows the induvidual the right to access any electronically stored information relating to that individual

-Data is only allowed to be held for only as long as it's neccessary

Hope that's helpful, because I didn't have an clue! I only got the homework a week ago, and then I researched the answer.

Answer 2

That question could be taken in several different way, but I'll attempt to adress all of them...

In terms of what data is covered: Personal data - any data that can be used to identify a living individual. Many pieces of data do not qualify alone as "personal data" until combined with other pieces of information.

The Act applies only to data which is held, or intended to be held, on computers ('equipment operating automatically in response to instructions given for that purpose'), or held in a 'relevant filing system'. Note that even a paper filing system or just an address book could be considered a "relevant filing system".

The act:

• Covers the rights of individuals to see the information collected on them.
• Covers the rights of individuals to have information collected on them corrected
• Specifies the conditions under which an organization may collect the information
• Provides limits on the information that can be collected
• Provides limits on retaining the information collected
• Limits who the data can be shared with and under what conditions
• Requires that appropriate technical and organisational measures be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
• Requires that data is not used in any way that may potentially cause damage or distress
• Requires that their data is not used for direct marketing
• Provides exceptions for National Security, Crime and Taxation, and personal use of your own and family information
• Details a number of civil and criminal offences for which data controllers may be liable if a data controller has failed to gain appropriate consent from a data subject.