Harrison Leavey

How to Remember:

The Data Protection Act

8 Principles

Introduced in 1998 to protect the rights of customers/data subjects – Particularly when data is sent or collected using computers.

Memory Pegging

• The following slides use a method called ‘memory pegging’ in order to help memorize the 8 principles of the Data Protection Act

• More about Memory Pegging

The 8 Principles1. Personal data should be obtained and processed fairly and lawfully

2. Personal data can be held only for specified and lawful purposes3. Personal data should be adequate, relevant and not excessive for the

required purpose4. Personal data should be accurate and kept up-to-date5. Personal data should not be kept for longer than is necessary6. Data must be processed in accordance with the rights of the data subject

7. Appropriate security measures must be taken against unauthorised access

8. Personal data cannot be transferred to countries outside the E. U. unless the country has similar legislation to the D.P.A.

One. Bun

Buns (Data) should be obtained and processed lawfully.Buns should not be stolen

Buns should not be processedin a bad way

Two. Shoe

Shoes (Data) can be held only for specified and lawful purposesShoes are specific. They are to be worn on feet only

If a shoe is held, it must onlybe used lawfully

Three. Tree

Personal data should be adequate, relevant and not excessive for the required purpose

No one likes an inadequate tree

No one likes an excessive tree

Four. There is a clock on my Door

Personal data should be accurate and kept up-to-date

A clock should be accurate

A clock should be kept up-to-date

Five. Alive

Personal data should not be kept for longer than is necessary

No one is alive for ever – Data should Not be held for longer than necessary

Six. Minus 2 = Four. Chapter 4 OMAM

Data must be processed in accordance with the rights of the data subject

Chapter 4 of Of Mice and Men involves Crooks.Crooks cares about his rights

Seven. Heaven

Appropriate security measures must be taken against unauthorised accessThe gates to heaven are very secure There is no unauthorised access to heaven

Eight. Gate

Personal data cannot be transferred to countries outside the E. U. unless the country has similar legislation to the D.P.A.Data must not be transferred outside the gates of a country unless the country has similar legislation