The Data Protection Act 1998 (DP)

The DP act applies to anyone who handles or has access to information concerning individuals. Everyone in the workplace has a legal duty to protect the privacy of information relating to individuals. The act sets standards (eight data protection principles), which must be satisfied when processing personal data (information that will identify an individual). The act also gives rights to the people the information is about i.e. the right of subject access, lets individuals find out what information is held about them.

The eight principles are that personal data must be:

1. obtained and processed fairly and lawfully

2. held only for specified purpose(s)

3. adequate, relevant and not excessive

4. accurate and kept up-to-date

5. held no longer than necessary

6. processed in accordance with the rights of the data subject

7. subject to appropriate security measures

8. only transferred to countries that have suitable data protection controls.

Notification: To comply with these principles every school must register the reasons for processing personal information with the Information Commissioners office, this is called Notification. Failure to notify is a criminal offence. For details on how to notify, visit the forum site Notification for Schools

Pupil Referral Units (PRU) are  considered to be Data Controllers in their own right and to comply with the above principles every PRU, like schools must register the reason for processing personal information with the Information Commissioners office. For details on how to notify click on the notification for schools link.

Determining if data is 'personal data' under the Data Protection Act 1998

Guidance: 

• Data Protection Guidance for Staff
• Security of Personal Information
• Security of Computerised Personal Information
• Homeworking - Data Protection Guidance
• Transporting Confidential Documents 
• JAPAN Test
• Guidance for Kent Schools and Services Regarding the Use of Photographic Images of Children
• Guidance on Access to pupils' information held by schools in England   
• Information Security for Schools
• Social Networking
• Information Security Guidance for Schools from Becta
• Kent Police Request Form for Disclosure of Personal Data