Data Protection

If you handle personal information about individuals, you have a number of legal obligations to protect that information under the Data Protection Act 1998.

One of the main rights, which the Data Protection Act gives to individuals, is access to their personal information. An individual can send you a request requiring you to tell them about the personal information you hold about them, and to provide them with a copy of that information. In most cases you must respond to a request within 40 calendar days of receiving it.

All public and private organisations are legally obliged to protect any personal information they hold, and may be required to register with the Information Commissioner’s Office (ICO).

The Information Commissioner’s Office’s mission is to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. They rule on eligible complaints, give guidance to individuals and organisations, and take appropriate action when the law is broken.

For further information click here

If you are required to register with the ICO. For small organisations the cost is £35 per annum, however this rises to £500 if your turnover exceeds £25.9 million or you employ more than 250 staff. For further information click here