Data Protection Principles
Compliance with the 8 Data Protection Principles should be subject to regular review and testing by data controllers and processors. Review can be carried out in the form of a self-audit.
The 8 Data Protection Principles are as follows:
Principle 1 Personal data must be obtained and processed fairly.
Principle 2 Data must be kept only for specified, explicit and legitimate purpose(s).
Principle 3 Data must not be used or disclosed in a manner incompatible with those purposes.
Principle 4 Data must be protected against unauthorised access, alteration, disclosure or destruction, or unlawful processing.
Principle 5 Data must be accurate, complete and, where necessary, kept up to date.
Principle 6 Data must be adequate, relevant and not excessive in relation to the purpose for which it is collected.
Principle 7 Data must not be kept for longer than is necessary.
Principle 8 Data must be disclosed to the data subject on request and corrected or destroyed where they so request.
The Data Protection Commissioner publishes annual reports in which a number of case studies concerning data breaches are outlined. Entities involved in such breaches are also named.
A data breach can have far reaching and damaging consequences for an organisations hard earned reputation
Further information can be found at www.dataprotection.ie
If protecting privacy means something to you, then Privacy Consultants have you covered.
Contact us for a fixed price that suits you.