===== Data Protection Act 2018  =====
[[dido:public:ra:xapend:xapend.a_glossary:start| Return to Glossary ]]

**Data Protection Act 2018** controls how your personal information is used by organisations, businesses or the government. It is the United Kingdom's implementation of the  [[dido:public:ra:xapend:xapend.a_glossary:g:dgpr|General Data Protection Regulation (GDPR)]].

Under the Data Protection Act 2018, you have the right to find out what information the government and other organisations store about you. These include the right to:

bEveryone responsible for using personal data has to follow strict rules called ‘data protection principles’. They must make sure the information is:

  * used fairly, lawfully and transparently
  * used for specified, explicit purposes
  * used in a way that is adequate, relevant and limited to only what is necessary
  * accurate and, where necessary, kept up to date
  * kept for no longer than is necessary
  * handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

There is stronger legal protection for more sensitive information, such as:

  * race
  * ethnic background
  * political opinions
  * religious beliefs
  * trade union membership
  * genetics
  * biometrics (where used for [[dido:public:ra:xapend:xapend.a_glossary:i:identification|identification]])
  * health
  * sex life or orientation

There are separate safeguards for personal data relating to criminal convictions and offences.

Source: [[https://www.gov.uk/data-protection ]]


/**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
/* To add a discussion page to this page, comment out the line that says 
  ~~DISCUSSION:off~~
*/
~~DISCUSSION:on|Outstanding Issues~~
~~DISCUSSION:off~~