Data Protection Act
The Data Protection Act 1998 works in two ways.
- It provides individuals with rights
- It also states that organisations which record and use personal information must be open about how the information is used and must follow the eight principles of good information handling.
You can find out about accessing personal data held on Norfolk Constabulary systems here.
Data Protection Principles
Anyone processing personal data must comply with the eight enforceable principles of good practice.
The information must be:
- processed fairly and lawfully
- processed for limited purposes
- adequate, relevant and not excessive
- accurate and up-to-date
- not kept longer than necessary
- processed in accordance with the data subject's rights
- not transferred to countries outside EEA without adequate protection.