Data Protection : A Practical Guide David Teague, Regional Manager, ICO Wales Helen Thomas, Senior Policy Officer, ICO Wales
Our Role Data Protection Act 1998 Freedom of Information Act 2000 Enforce and regulate: Data Protection Act 1998 Freedom of Information Act 2000 Environmental Information Regs 2004 Privacy & Electronic Communications Regs 2003 Provide information to individuals and organisations Adjudicate on complaints Promote good practice
Quick update…
The Data Protection Act The Act creates: Obligations for “data controllers” Rights for “data subjects” 2 types of personal information: Personal data Sensitive personal data Media covered.. Computer Smart phones Data sticks Fax Structured manual filing (and unstructured if you are a Public Authority) Genetic and photos Camera Notes waiting to go on file / computer
Data Protection Principles Fair & lawful For specific purpose(s) Adequate, relevant & not excessive Accurate & up to date Not kept longer than necessary Individual’s rights Security International transfers
Sharing Personal Information
Consent India Gate – New Delhi
Legal duty Brandenburg gate
Vital interests
When DP goes wrong…
Any Questions?
Contact us wales@ico.org.uk Information Commissioner’s Office (Wales) 2nd Floor, Churchill House Churchill Way Cardiff CF10 2HH Tel: 029 2067 8400 wales@ico.org.uk Subscribe to our e-newsletter at www.ico.org.uk, or find us on: @iconews /iconews