Key definitions under the DPA 1998 [Archived]

Published by a ½Û×ÓÊÓÆµ Information Law expert
Practice notes

Key definitions under the DPA 1998 [Archived]

Published by a ½Û×ÓÊÓÆµ Information Law expert

Practice notes

ARCHIVED: This archived Practice Note provides information on the data protection regime before 25 May 2018 and reflects the position under the Data Protection Act 1998 (DPA 1998). This Practice Note is for background information only and is not maintained.

Background

The DPA 1998 governs processing of personal data in the UK. It obliges processors of such data to comply with eight principles, and gives individuals a right to know what information is held about them. For further information on the principles, see Practice Note: data protection principles under the DPA 1998.

The Information Commissioner's Office (ICO) supervises and enforces the implementation of the DPA 1998. For more information, see Practice Notes: The Information Commissioner’s Office (ICO) and Sanctions and enforcement under the DPA 1998.

Sections 1 and 2 of the DPA 1998 contain definitions for the key terms used throughout the act and within the Information Commissioner's codes of practice or other guidance. Key statutory definitions include:

  1. •

    Data

  2. •

    Personal data

  3. •

    Sensitive personal data

  4. •

    Data subject

  5. •

    Data controller

  6. •

    Data processor

  7. •

    Processing

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Data protection definition
What does Data protection mean?

In an employment context, this refers to the obligation on an employer to protect the data of its employees and ensure that it complies with the law on how it uses the employees' data.

Popular documents