The Data Protection Act gives individuals certain rights regarding information held about them. It places obligations on those who process information (data controllers) while giving rights to those who are the subject of that data (data subjects). Personal information covers both facts and opinions about the individual.
The purpose of the Data Protection Act is to protect personal information about living individuals. The act places legal obligations on organisations that handle personal data. Councils must comply with the act and does so by applying the eight 'principles of data protection', which are legally enforceable.
Organisations that hold personal information have a duty under the act to provide individuals with access to information about themselves if they request it. Under the act you have a legal right to ask:
For any enquiries which are related to the Data Protection Act 1998, please contact one of the participating Councils.
Anyone processing personal information must comply with eight enforceable principles of good information handling practice.
These say that data must be: