Data Protection Act

Data Protection

The Data Protection Act 1998 provides the framework for the processing of personal information about living individuals.  

 

The Act states that anyone who processes personal information must comply with eight principles that make sure personal information is

 

• processed for limited purposes
• adequate, relevant and not excessive
• accurate and up to date
• not kept for longer than is necessary
• processed in line with your rights
• secure
• not transferred to other countries without adequate protection

It also gives individuals the right to know what information is held about them.  A request for information under the Data Protection Act is called a Subject Access Request.  Organisations must respond to a Subject Access Request within 40 calendar days.  

 

A Subject Access Request must be in writing (this includes e-mail).  We will ask to see evidence of your identity, such as your passport or driving licence, before disclosure of information.

 

For access to social care information, you can make a Subject Access Request online.

We do not charge for access to social care information. For other Subject Access Requests there is a £10 fee. When we have located the information requested, we will advise you if there is a charge and how to pay.

 

For more information about the Data Protection Act, please visit the website of the Information Commissioner's Office.