NEXT STEP?

We need to keep certain information about Staff and Students and to comply with the law, information will be collected and used fairly, stored safely and not disclosed to any other person unlawfully. In doing this we will comply with the Data Protection Principles which are set out in schedules 1 (part 1) of the Data Protection Act 1998 (the 1998 Act). In summary these state that the personal data shall:

• Be processed fairly, lawfully and in particular shall not be processed unless
  • a) at least on of the condition in schedules 2 is met
  • b) in the case of sensitive personal data at least one condition in schedule 3 is met
• Personal data shall be:
  • a) obtained only for specified and lawful purposes and shall not be further processed in any manner incompatible with that purpose of this purposes.
  • b) adequate, relevant and not excessive in relation to the purposes for which they are processed
  • c) accurate and where necessary, kept up to date
  • d) processed in accordance with the rights of the data subject under this act (the subject, you, have the right to access any data stored on or about you).
• Personal data processed for any purpose or purposes should not be kept longer than is necessary for that purpose or purposes.
• Appropriate technical and organisational measures shall be taken against accidental lose or destruction of or damage to personal data.
• Personal data shall not be transferred to a country or territory outside the European economic area unless that country or territory ensures an adequate level of protection for the rights and freedoms of the data subject in relation to the processing of personal data.
• All members of staff who use the processes and any personal information must ensure they follow these principles at all times.
• Anyone who considers that the policy has not been followed i respect of personal data about themselves should raise the matter with the appropriate data controller. If the matter is not resolved it should be raised as a formal grievance.