The Data Protection Act 1998 contains a number of important principles regulating the way in which information relating to individuals is held and used. The Act sets out eight Data Protection principles which employers are obliged to follow. The Act also creates a number of offences that employers may commit if the provisions of the Act are breached, some of which impose personal liability on company directors and other officers.It is vital that employers familiarise themselves with their obligations under the Act and ensure that the appropriate procedures are put in place to ensure compliance. The Data Protection Policy and Management Guide v3.0 has been published to help employers understand and meet those obligations and to provide clear guidance for employees on their responsibilities when handling sensitive personal data.
The draft policy covers:
- Processing Data
- Collection of Data
- Transferring Data
- Retaining Data
- Employee Responsibilities
The draft policy also comes with a 12-page Management Guide containing helpful notes on the policy.








