The Data Protection Act 1998
The Data Protection Act 1998 gives you as a patient of this Trust certain rights on the information about you and states eight principles that the Trust must follow. It involves the type of information we collect about you, why and how it is collected, how long it is held by us and whom it may be disclosed to.
The Eight Data Protection Principles are:
- Personal data must be processed fairly and lawfully.
- Personal data shall be obtained only for one or more specified and lawful purposes.
- Personal data shall be adequate, relevant and not excessive in relation to the purpose(s) for which they are processed.
- Personal data shall be accurate and where necessary kept up to date.
- Personal data processed for any purpose(s) shall not be kept longer than is necessary for that purpose(s).
- Personal data shall be processed in accordance with the rights of data subjects under this Act.
- Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
- Personal data shall not be transferred to a country or territory outside the European Area, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.