1. What is the Data Protection Act (DPA)? 1998 The Data Protection Act 1998 seeks to strike a balance between the rights of individuals and the sometimes competing interests of those with legitimate reasons for using personal information. The DPA gives individuals certain rights regarding information held about them. It places obligations on those who process information (data controllers) while giving rights to those who are the subject of that data (data subjects). Personal information covers both facts and opinions about the individual.

2. Data Protection Act, 1998 Personal data must be: 1.Processed fairly and lawfully 2.Obtained for specified and lawful purposes 3.Use not excessive for purpose 4.Accurate and up to date 5.Not kept longer than necessary 6.Processed with the rights of the data subjects 7.Kept secure 8.Not to be transferred outside the EU

3. Rights of the Data Subjects 1.Given a copy of data held 2.Prevent processing if causes distress 3.Prevent use of direct marketing 4.Receive compensation for distress caused 5.Make a request to the Data Protection Commissioner if the Act has been contravened

4. Exemptions 1.Related to National Security 2.Associated with Crime and taxation 3.Involved with Health, Education and social work 4.Used in regulatory activities by public watch dogs 5.Used in research, history and statistics 6.Required by law in connection with legal proceedings 7.Held for domestic reasons