1. Data Protection : A Practical Guide
David Teague, Regional Manager, ICO Wales
Helen Thomas, Senior Policy Officer, ICO Wales

2. Our Role Data Protection Act 1998 Freedom of Information Act 2000
Enforce and regulate:
Data Protection Act 1998
Freedom of Information Act 2000
Environmental Information Regs 2004
Privacy & Electronic Communications Regs 2003
Provide information to individuals and organisations
Adjudicate on complaints
Promote good practice

3. Quick update…

4. The Data Protection Act
The Act creates:
Obligations for “data controllers”
Rights for “data subjects”
2 types of personal information:
Personal data
Sensitive personal data
Media covered..
Computer
Smart phones
Data sticks
Fax
Structured manual filing (and unstructured if you are a Public Authority)
Genetic and photos
Camera
Notes waiting to go on file / computer

5. Data Protection Principles
Fair & lawful
For specific purpose(s)
Adequate, relevant & not excessive
Accurate & up to date
Not kept longer than necessary
Individual’s rights
Security
International transfers

6. Sharing Personal Information

7. Consent
India Gate – New Delhi

8. Legal duty
Brandenburg gate

9. Vital interests

10. When DP goes wrong…

11. Any Questions?

12. Contact us wales@ico.org.uk Information Commissioner’s Office (Wales)
2nd Floor, Churchill House
Churchill Way
Cardiff CF10 2HH Tel:
Subscribe to our e-newsletter at or find us on:
@iconews
/iconews