Professional Obligations

Sources of professional obligations

Data Protection Act 1998

Where computerised personal data, or data held in a structured manual file, is to be processed (which includes collecting, using, disclosing, destroying or holding personal data), we must ensure that the data is:

• fairly and lawfully processed;
• processed for limited purposes;
• adequate, relevant and not excessive;
• accurate;
• not kept longer than necessary;
• processed in accordance with individuals' rights;
• kept secure;
• not transferred to non-EEA (European Economic Area) countries without adequate protection.