Data Protection Law – A Brief Guide

Data protection law isn't the easiest of things to get to grips with but hopefully the following thoughts will help. It covers personal data – basically data from which a person can be identified. It applies mainly to processing data on computers and other devices but covers also manual filing systems that allow data about an individual to be easily accessed.

A penalty of up to £500k for serious breach can be imposed and reputational damage can be significant if your company features in the press as being careless with people's data, so it is worth taking seriously.

Tell those whose data you collect what you will do with it and don't do things with their data you haven't told them you will do. That should keep you out of trouble in most cases. If you get involved with sensitive data (for example, relating to health or race), take extra care as the rules are much tighter.