Friday, 30 May 2014

Data Protection


Data protection is the relationship between collection and dissemination of data, technology, the public expectation of privacy, and the legal and political issues surrounding them. The challenge in data privacy is to share data while protecting personally identifiable information. 

Laws for protection of data exist to balance between the rights of individuals to privacy and the ability of organizations to use data for the purposes of business. The Data Protection Act (DPA) protects the privacy and integrity of data held on individuals by businesses and other organizations. The act ensures that individuals have access to their data and can correct it, if necessary. 

Here are few tips for Protection of data in organizations according to the Data Protection Act:

Data processing means obtaining, recording or holding the data or carrying out any operation on the data like - Organization, adaptation or alteration of the data, Retrieval, consultation or use of the data, Disclosure of the information or data by transmission, dissemination or otherwise making available, or Alignment, combination, blocking, erasure or destruction of the data.

•    Personal data of employees shall be processed fairly and lawfully.
•    Personal data should be obtained only for specified and lawful purpose, and shall not be further processed in any manner incompatible with that purpose.
•    Personal data should be adequate, relevant and not in excess in relation to the purpose for which they are processed.
•    Personal data should be accurate and, where necessary, kept up to date.
•    Personal data processed for any purpose should not be kept longer than is necessary after that purpose is fulfilled.
•    Personal data should be processed in accordance with the rights of data subjects under Data Protection Act.
•    Appropriate technical and organizational measures should be taken against unauthorized or unlawful processing of personal data and against physical loss of data like accidental loss, destruction, or damage to personal data.
•    Personal data should not be transferred overseas unless that country ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

The increasing use of information technology and the internet ensures that data protection remains one of the most important and relevant laws that online businesses are required to comply with. The internet is all about the transfer of information. Internet is also used for collection of information. Organizations must care about collection, storage and usage of personal data. This involves amending employment and marketing practices in addition to internal training.
Share this article :

0 comments:

Post a Comment