The Data Protection Act 1998 applies to information about individuals ("personal data"). It sets out the requirements for handling personal data and gives individuals the right to access information that the University holds about them.
The eight data protection principles
The Data Protection Act sets out eight principles governing the use of personal information which we must comply with, unless an exemption applies.
We must tell the Information Commissioner why we process data.
The University has an obligation under the Data Protection Act to ensure that a framework for ensuring an adequate level of security is in place.
External websites that have useful information on the Data Protection Act 1998.