New legislation is likely to be published later this year which will give effect to a 1995 European Directive on the protection of individuals with regard to the processing of personal data. This new legislation will extend the protection currently afforded by the Data Protection Act, 1988 (the "1988 Act").
Manual Records
The 1988 Act only applies to the processing of personal data by computer. One of the main changes will be that the new law will extend to manual records. This means that manual files which relate to employees, interviewees, customer base and in the case of the medical profession, health records of patients will be covered.
Confidentiality and Security
Under the 1988 Act, responsibility for data processing is held by a data controller or a data processer designated by the Controller both of whom manage the data. Only the controller or a person authorised by the controller may process personal data. The new legislation will also impose new duties on controllers
