Qc3F Unit 9

263 Words2 Pages
Unit 9: Promote Good Practice in Handling Information in Health and Social care settings 1.1 The Data Protection Act is mandatory. All organisations that hold or process data MUST comply by this. The Data Protection Act 1998 (DPA 1998) is an act of the United Kingdom Parliament defining the ways in which information about living people may be legally used and handled. The main intent is to protect individuals against misuse or abuse information about it. The Data Protection Act 1998 commenced on 1 March 2000, with most of its provisions being effective from 24 October 2001. It replaced and broadened the Data Protection Act 1984. The purpose of the Act is to protect the rights and privacy of individuals, and to ensure that data about them are not processed without their knowledge and are processed with their consent wherever possible. The Act covers personal data relating to living individuals, and defines a category of sensitive personal data which are subject to more stringent conditions on their processing than other personal data. 1.2 The Data Protection Act relates to all information that is kept on an individual. There are 8 basic principles to the Data Protection Act: The Data must be: 1. Fairly and lawfully processed 2. Used for limited purposes 3. Not excessive but adequate and relevant 4. Not kept longer than is necessary 5. Accurate but concise, containing facts and not assumptions 6. Kept secure at all times, information stored on computers must be password protected 7. Not transferred to another country that cannot maintain confidentiality of the
Open Document