The GDPR ( General Data Protection Regulation?

Data Protection Act 1998 – gives individuals the right to know what information is held about them, and those that processes personal information must comply with eight principles, which makes sure that personal information is fairly and lawfully processed; processed for limited purposes; adequate, relevant and not excessive; accurate and up to date; not kept for longer than is necessary; processed in line with your rights; secure; not transferred to other countries without adequate protection;

Any individual has the right to obtain information stored about them at any given time.

given extra safeguards for sensitive information – e.g. ethnicity, political views, religion, health or criminal records

Confidentiality applies to the children act in many ways it protects children and young peoples information from being put into the wrong hands although the children act does state that the person can obtain the information being held themselves as because of data protection you have the right to access your own files.

* Processed in line with the rights of individuals - this includes the right to be informed of all the information held about them, to prevent processing of their personal information for marketing purposes, and to compensation if they can prove they have been damaged by a data controller's non-compliance with the Act.

In this document I will be discussing the laws that are related to security and privacy of datas, I will explain how they relate to the security and privacy of data.

The Data Protection Act 1988 – This act covers the rights of an individual. Written, confidentially, retrieval and handling of verbal information.

The data protection Act 1998 is how personal information of living people is being used. The main intention is to protect people’s data from being used illegally. The principles of the data protection act that must be followed are the information must be used moderately and follow the rules set by the law. The information must be kept for a certain period of time. For example, if an organisation has information of someone and they can only keep it for 5

| |The data protection act gives individuals the right to see the information recorded about them and | |

‘The purpose of the Act is to protect the rights and privacy of individuals and to ensure that data about them are not processed without their knowledge and are processed with their consent wherever possible’. http://www.soas.ac.uk/infocomp/dpa/policy/overview/

The Data Protection Act protects the privacy and integrity of data held on individuals by businesses and other organizations. The act ensures that individuals (customers and employees) have access to their data and can correct it, if necessary. It is enforced by the Information Commissioner’s Office (ICO), which has responsibility for overseeing the Freedom of Information Act and the regulation of interception of communications under the Regulation of Investigatory Powers Act 2000.

a) Data protection Act (1998) – DPA ‘It is the main piece of legislation that governs the protection of personal data in the UK.’ (http://en.wikipedia.org/wiki/Data_Protection_Act_1998).

Personal data is quickly becoming a commodity in today's high technology world. This information is used by banks, investment and brokerage companies, credit card merchants, government agencies (local, state and federal), and consumer product-based companies. Most people probably don't realize the amount of information that's shared between companies, or how often it's done. Many companies sell and share customer data to help sell products and find out what new products they should produce. Other uses include gathering information about inventory levels to help better determine what types of products are bought at which store, when and how often. This can be used for inventory and production, to make sure that the store (or

The EU General Data Protection Regulation (GDPR) was designed to harmonize the data privacy laws across Europe. This is mainly done to protect and empower the EU citizens data privacy and to reshape the way organizations approach data privacy. Let’s understand the requirements of Europe’s GDPR privacy and how it affects US companies.

Act was made law in 1984 but was replaced by a new Act in 1998 to