Data Protection & Freedom of Information The Practical Implications of Data Protection and Freedom of Information Caroline Dominey Data Protection Officer.

Slides:

Advertisements

Similar presentations

Legal & Regulatory Compliance. Overview What types of information should be included? What issues or problems might there be? What benefits could be obtained?

Advertisements

Administrative Systems and the Law What you need to know to produce an oral presentation for Unit 7 When the presentations will take place Resources you.

TEAM 4 Case Study Mauritius: Mrs Nandini Kissoon-Luckputtya

The Data Protection (Jersey) Law 2005.

Legal Implications of ICT. In this section will look at: Legal Implications of ICT: ☼ Data Protection Act 1998 ◦ The 8 Principles, ◦ The Data Subject.

University of Sunderland Professionalism and Personal Skills Unit 11 Professionalism and Personal Skills Computer Legislation.

Duncan Woodhouse – Assistant Registrar for Information Security, Risk Management and Business Continuity Helen Wollerton – Administrative Officer (Legal.

A European View of Privacy Protection John Woulds Director of Operations UK Data Protection Commissioner National Conference on Privacy, Technology & Criminal.

DATA PROTECTION AND PATIENT CONFIDENTIALITY IN RESEARCH Nic Drew Data Protection Manager University Hospital of Wales   

Data Protection Paul Veysey & Bethan Walsh. Introduction Data Protection is about protecting people by responsibly managing their data in ways they expect.

Data Protection Overview

The Data Protection Act

FORCE INFORMATION MANAGEMENT. INFORMATION MANAGEMENT Aim: To provide students with an awareness of the Force Information Management and legislation that.

 The Data Protection Act 1998 is an Act of Parliament which defines UK law on the processing of data on identifiable living people and it is the main.

CENTRAL SCOTLAND POLICE Data Protection & Information Security Stuart Macfarlane Information Governance Unit Police Service of Scotland.

The Information Commissioner’s Office David Evans.

Health & Social Care Apprenticeships & Diploma

Research Paper Presentation Software Engineering in agent systems.

Computers, the law and ethics  Lesson Objective: Understand some of the legal & ethical issues in developing computer systems  Learning Outcome: Know.

The Data Protection Act 1998 The Eight Principles.

GEOG3025 Confidentiality and social implications.

Data Protection Act AS Module Heathcote Ch. 12.

Data Protection Act & Freedom of Information Simon Mansell Corporate Governance and Information Team.

Data Protection Corporate training Data Protection Act 1998 Replaces DPA 1994 EC directive 94/46/EC The Information Commissioner The courts.

Processing personal health data: the regulator’s perspective Ken Macdonald Assistant Commissioner Information Commissioner’s Office.

What is personal data? Personal data is data about an individual which they consider to be private.

The Data Protection Act - Confidentiality and Associated Problems.

DATA PROTECTION ACT 1998 Became law on 1 March 2000 Only applies to the use of personal data, that is data which relates to an identifiable living individual,

The Data Protection Act What Data is Held on Individuals? By institutions: –Criminal information, –Educational information; –Medical Information;

BTEC ICT Legal Issues Data Protection Act (1998) Computer Misuse Act (1990) Freedom of Information Act (2000)

Data Protection Act (1984, 1998). 2 Data Protection Act There are many organisations which hold personal information about individuals Examples: Loyalty.

Local Government Reform and Compliance with the DPA Ken Macdonald Assistant Commissioner (Scotland & Northern Ireland) Information Commissioner’s Office.

Legal issues The Data Protection Act Legal issues What the Act covers The misuse of personal data By organizations and businesses.

Data Protection Property Management Conference. What’s it got to do with me ? As a member of a management committee responsible for Guiding property you.

The Data Protection Act What the Act covers The misuse of personal data by organisations and businesses.

Data Protection - Rights & Responsibilities Information Commissioner’s Office Orkney Practice Forum 4 th July 2007.

Data Protection Act The Data Protection Act (DPA) is a balance between rights of the DATA SUBJECT and obligations of the DATA CONTROLLER DATA CONTROLLER.

Computing, Ethics & The Law. The Law Copyright, Designs and Patents Act (1988) Computer Misuse Act (1990) Data Protection Act (1998) (8 Main Principles)

INFORMATION GOVERNANCE AND CONFIDENTIALITY Information Governance Facilitator.

What is the Data Protection Act (DPA)? 1998 The Data Protection Act 1998 seeks to strike a balance between the rights of individuals and the sometimes.

Data Protection Philip Reed. Introduction What is data? What is data protection? Who needs your data? Who wants your data? Who does not need your data?

DATA PROTECTION ACT INTRODUCTION The Data Protection Act 1998 came into force on the 1 st March It is more far reaching than its predecessor,

Session 11 Data protection. 1 Contents Part 1: Introduction Part 2: Applicability and responsibility Part 3: Our procedures on data protection Part 4:

© University of Reading Lee Shailer 06 June 2016 Data Protection the basics.

Computing and Ethics & The Law. The Law Copyright, Designs and Patents Act (1988) Computer Misuse Act (1990) Data Protection Act (1998) (8 Main Principles)

Workshop Understanding your responsibilities under the Data Protection Act 1998 and the Freedom of Information Act 2000 Adele Rhodes Girling.

Uses of brain imaging data: privacy and governance implications Dr. Hester Ward Medical Director, Information Services Division, (ISD) Consultant in Public.

Clark Holt Limited (Co. No ), Hardwick House, Prospect Place, Swindon, SN1 3LJ Authorised and regulated by the Solicitors Regulation.

Data Protection and Freedom of Information. Objectives Describe the main points of the Data Protection Act 1998 and Freedom of Information Act 2000 Illustrate.

The Data Protection Act 1998

The Data Protection Act 1998

Data protection and data sharing

CISI – Financial Products, Markets & Services

Trevor Ellis Trainee Programmer (1981 – 28 years ago)

Level 2 Diploma in Customer Service

Privacy Impact Assessments (PIAs)

General Data Protection Regulation

Data Protection Act.

The Data Protection Act 1998

Data Protection Legislation

Data Protection & Freedom of Information- An Introduction

Data Protection Act.

Introduction to Records Management, FOI & Data Protection

Data Protection principles

Identify the laws and guidelines that affect day-to-day use of IT.

Data protection and data sharing

General Data Protection Regulations 2018

Identify the laws and guidelines that affect day-to-day use of IT.

Caring for People and their Data

Presentation transcript:

Data Protection & Freedom of Information The Practical Implications of Data Protection and Freedom of Information Caroline Dominey Data Protection Officer

Overview Data Protection Act Freedom of Information Act Practical advice on Records Management Q&A

Data Protection Act Rights –Informed of use of personal data –Incorrect personal data corrected –To access personal data –Prevent certain processing Responsibilities –Register with Information Commissioner –Process Personal data legally in line with 8 principles.

The Data Protection Principles 1.Processed fairly & lawfully. 2.Obtained only for specified & lawful purposes & not further processed in a manner incompatible with that purpose. 3.Adequate, relevant & not excessive. 4.Accurate & kept up to date. 5.Shall not be kept for longer than is necessary. 6.Processed in accordance with the rights of data subjects. 7.Protected against accidental loss, destruction or damage. 8.Personal data shall not be transferred outside the European Economic Area unless adequate protection exists.

Freedom of Information Rights –‘Right to know’ Responsibilities –Publication scheme (available at: ) –Respond to other requests within 20 working days

Requests for Information Data Protection –Request for personal data –40 calendar days –£10 maximum charge –Data Protection Officer to respond Freedom of Information –Other information –Must be in writing, to any member of staff –20 working days –Exemptions –£450 fee limit –Duty to offer advice and assistance –Bias in favour of disclosure

Records Management (1) 1.Security & Access Confidentiality  Data Protection  Other Data Security  Physical security  Restricted access

Records Management (2) 2.Electronic Records s  Re-read before sending  Use the subject line sensibly  Cc & Bcc with care  File your  Deletion Version control Shared servers Technology

Records Management (3) 3.Destruction Every copy? Retention Schedule Complete deletion?

Summary Data Protection, FOI and other laws regulate the way in which we manage Information Simple RM practices can save time, energy and money Generally it’s not until something goes wrong that RM becomes an issue.

And finally… Caroline Dominey Ext: 3033