Guide to Data Protection Act for Data Controllers
- Change log
 - Introduction
 - How to use this guidance
 - Key definitions
 - Who does the DPA apply to?
 - What is processing of personal data?
 - What is a data controller?
 - What is a data processor?
 - What information does the DPA apply to?
 - Data Protection Principles
                            
- First Data Protection Principle - Fair and lawful processing
 - Second Data Protection Principle - Purpose limitation
 - Third Data Protection Principle - Data minimization
 - Fourth Data Protection Principle – Data accuracy
 - Fifth Data Protection Principle - Storage limitation
 - Sixth Data Protection Principle – Respect for the individual’s rights
 - Seventh Data Protection Principle - Security – integrity and confidentiality
 - Eighth Data Protection Principle - International transfers
 
 - Legal basis for processing
 - Sensitive personal data
 - Individual rights
 - Personal data breaches
 - Exemptions
                            
- National Security
 - Crime, government fees and duties
 - Health
 - Education
 - Social Work
 - Monitoring, inspection or regulatory function
 - Journalism, literature or art
 - Research, history or statistics
 - Information available to public by or under enactments
 - Disclosures required by law or made in connection with legal proceedings
 - Personal, family or household affairs
 - Honours
 - Corporate finance
 - Negotiations
 - Legal professional privilege and trusts
 
 - Contracts between data controllers and data processors
 - Questions or comments?
 
Data Protection Principles
The DPA is built on eight fundamental principles that regulate the processing of personal data:
First data protection principle: Fair and lawful processing
Second data protection principle: Purpose limitation
Third data protection principle: Data minimization
Fourth data protection principle: Data accuracy
Fifth data protection principle: Storage limitation
Sixth data protection principle: Respect for the individual’s rights
Seventh data protection principle: Security – integrity and confidentiality
Eighth data protection principle: International transfers
Previous Next