Data protection and data sharing

Slides:

Advertisements

Similar presentations

Legal & Regulatory Compliance. Overview What types of information should be included? What issues or problems might there be? What benefits could be obtained?

Advertisements

Administrative Systems and the Law What you need to know to produce an oral presentation for Unit 7 When the presentations will take place Resources you.

Getting data sharing right for every child

Training prepared by Geoff Webb Information Security & Governance Consultant Data Protection isn’t a choice, it’s the law What all CPH staff must do 17/07/2013.

What does the Data Protection Act do? It sets standards which must be satisfied when obtaining, recording, holding, using, disclosing or disposing of.

Data Protection & Freedom of Information The Practical Implications of Data Protection and Freedom of Information Caroline Dominey Data Protection Officer.

3 Is there something I should know? Exercising our rights.

Information Commissioner’s Office: data protection Judith Jones Senior Policy Officer Strategic Liaison – public security 16 November 2011.

DATA PROTECTION AND PATIENT CONFIDENTIALITY IN RESEARCH Nic Drew Data Protection Manager University Hospital of Wales   

Audiences NI Data Protection Workshop

Data Protection Paul Veysey & Bethan Walsh. Introduction Data Protection is about protecting people by responsibly managing their data in ways they expect.

Data Protection Overview

An overview of the Data Protection Act Legal framework The Data Protection Act 1998 came into force in March 2001, replacing the Data Protection.

2 Private versus public. 2 Lesson objectives By the end of the session, you will: understand how you might unintentionally disclose personal data; define.

Implementation of Security and Confidentiality in GP Practices.

Care.Data an ICO Update EMIS National User Group Conference East Midlands Conference Centre Nottingham 3 rd October 2013 Lynne Shackley Lead Policy Officer.

Professional Values and Basic Business Legislation.

Local Government Reform: Incorporating Planning Functions Ken Macdonald Assistant Commissioner (Scotland & Northern Ireland) Information Commissioner’s.

The Data Protection Act (1998). The Data Protection Act allows you to Check if any organisation keeps information about you on computer or in paper form.

Data Protection Corporate training Data Protection Act 1998 Replaces DPA 1994 EC directive 94/46/EC The Information Commissioner The courts.

Processing personal health data: the regulator’s perspective Ken Macdonald Assistant Commissioner Information Commissioner’s Office.

Data Protection: What You Need to Know Shauna Dunlop 1 July 2015.

Sharing Pupil Data North Yorkshire County Council Schools Conference Robert Beane and Louise Jackson.

What is personal data? Personal data is data about an individual which they consider to be private.

Everyone has a duty to comply with the Act, including employers, employees, trainees, self-employed, manufacturers, suppliers, designers, importers of.

Local Government Reform and Compliance with the DPA Ken Macdonald Assistant Commissioner (Scotland & Northern Ireland) Information Commissioner’s Office.

Legal issues The Data Protection Act Legal issues What the Act covers The misuse of personal data By organizations and businesses.

Data Protection Property Management Conference. What’s it got to do with me ? As a member of a management committee responsible for Guiding property you.

The Data Protection Act What the Act covers The misuse of personal data by organisations and businesses.

12/12/2015 Data Protection Act /12/2015 The DP Act A law that protects personal privacy and upholds individual’s rights Anyone who handles personal.

Data Protection - Rights & Responsibilities Information Commissioner’s Office Orkney Practice Forum 4 th July 2007.

THE DATA PROTECTION ACT Data Protection Act 1998 DPA 1. Reasons2. People3. Principles 4. Exemptions 4 key points you need to learn/understand/revise.

Data Protection Act The Data Protection Act (DPA) is a balance between rights of the DATA SUBJECT and obligations of the DATA CONTROLLER DATA CONTROLLER.

Information Systems Unit 3.

Data Protection Act (1998).

Data Protection and research Rachael Maguire Records Manager.

DATA PROTECTION ACT (DPA). WHAT IS THE DATA PROTECTION ACT?  The Data Protection Act The Data Protection Act (DPA) gives individuals the right.

What is the Data Protection Act (DPA)? 1998 The Data Protection Act 1998 seeks to strike a balance between the rights of individuals and the sometimes.

Data Protection Philip Reed. Introduction What is data? What is data protection? Who needs your data? Who wants your data? Who does not need your data?

Session 11 Data protection. 1 Contents Part 1: Introduction Part 2: Applicability and responsibility Part 3: Our procedures on data protection Part 4:

Can you share? Yes you can!! Angus Council Adult Protection Maureen H Falconer, Senior Policy Officer Information Commissioner’s Office.

Getting data sharing right for every child Maureen H Falconer Senior Policy Officer Information Commissioner’s Office.

Workshop Understanding your responsibilities under the Data Protection Act 1998 and the Freedom of Information Act 2000 Adele Rhodes Girling.

Data protection—training materials [Name and details of speaker]

Commissioning Services: with the DPA in mind South Yorkshire Information and Data Sharing Group Sheffield 14 th August 2014 Lynne Shackley Lead Policy.

Data protection act. During the second half of the 20th century, businesses, organisations and the government began using computers to store information.

General Data Protection Regulation (EU 2016/679)

The Data Protection Act 1998

The Data Protection Act 1998

Data protection and data sharing

Data Protection and Confidentiality

Data Protection : A Practical Guide

Privacy Impact Assessments (PIAs)

General Data Protection Regulation

Museums + Heritage webinar, 30 November 2017

The Data Protection Act 1998

GDPR - Individual’s Rights

New Data Protection Legislation

Data Protection Act.

G.D.P.R General Data Protection Regulations

Data Protection and Running a Compliant Pub Watch SCHeme

Data Protection principles

OECD Guidelines Collection Limitation: should be limited to personal data, obtained by lawful and fair means, and (where appropriate) with knowledge and.

Data Protection and You

Identify the laws and guidelines that affect day-to-day use of IT.

General Data Protection Regulations 2018

Identify the laws and guidelines that affect day-to-day use of IT.

Getting Ready For GDPR Simon Marks Director

GDPR what do we need to do?

Presentation transcript:

Data protection and data sharing Victoria Cetinkaya, Senior Policy Officer, Information Commissioner’s Office 29 November 2013, DCLG Really Useful Day for Suppliers

The eight principles of the DPA98 Fair and lawful processing Processed for limited & specified purposes Adequate, relevant and not excessive Accurate and up to date Not kept for longer than necessary Processed in line with individuals’ rights Kept secure – appropriate measures Not transferred outside the EEA without adequate protection

Access to information - DPA right of subject access - Individuals have a right of access to their personal data held by you - 40 day time limit; maximum fee of £10 can be charged - FOIA right to request information – anyone can request information held by a public authority. This includes local authorities. - 20 working day time limit 3

Data security Common themes: - loss/theft of unencrypted laptops and memory sticks - insecure disposal of personal data - lost records - information posted, faxed or emailed to the wrong recipient - lack of staff training and proper procedure - insecure websites - remote working It’s usually basic failings that lead to enforcement action. 4

Data sharing: the ICO approach - DPA is not a barrier where information sharing is justified, necessary and proportionate - DPA provides a framework for sharing in a secure, lawful and reasonable way - Limitations and safeguards essential - Vital to get it right with partnerships, multi-agencies, outsourcing - Statutory code 5

Data sharing - Why do you want to share – purposes - Can you achieve your aims without sharing personal data? - A proportionate approach? - Minimise the data shared - Risks of sharing vs. risks of not sharing - Ask or tell? - Data sharing agreements 6