1.5.1 Computed Related Legislations

• is the law that protects personal data from being misused ( covers all personal data) • applies to info stored on both computers and in organised paper filing systems

• name • address • date of birth • race • religion

• any data that can be used to identify a living person • or any data that can be used in combination with other data to identify a living person

An individual who can be identified by personal data

• police investigating a crime are not subject to the DPA • intelligence service processing

• Personal data must be fairly and lawfully processed • Personal data must be collected for specified and lawful purposes • Personal data must be adequate, relevant and not excessive/ ensure only relevant data is kept [1] • Personal data must be kept accurate and up to data [1] • Personal data must not be kept for longer than is necessary [1] • Personal data must be processed in accordance with the rights of the data subject / employees are given access to their data • Personal data must be held securely [1] • Data must not be passed outside of the EU

• encryption of the data so that even if accessed , data cannot be read [1] • backup data which provides a copy of the data incase of corruption [1] • passwords needed to access the database restricts access to authorised personnel [1]

Data subjects have the : - right to request a copy of the data being held about them - right to correct the data held about them - right to prevent marketing using the contact details provided by the data subject