|
Obtaining
Data
Data, whether
computerised or manual, should only be held for the
purpose it was obtained:
- It should be relevant
for that purpose
- We should only collect
data that is needed, not that which "may be
useful"
Forms
Design
All forms used to
collect data must:
- Include a statement
about compliance with the 1998 Data Protection Act
- State the purpose the
data is to be used for
- Indicate third party
information sources
- Indicate to whom data
may be disclosed
Note: If it does not do
this positive consent is required from every individual
for each disclosure of information to be made, which
would be extremely time-consuming and costly
Holding
Data
All data should
only be held as long as it is needed for the purpose for
which it was collected:
- There are legislative
requirements to hold some information for a given
period of time, but otherwise we need to ensure
information is not just kept indefinitely without
review.
- All data must be
accurate, so we need to confirm data received from
third parties and check periodically that all data
held remains current.
|
