Data Protection

Getting started

If you are you collecting, storing, or otherwise using personal data or special category data, please familiarise yourself with the principles underpinning Data Protection legislation and apply them to your project.

  • You will also need to consider and agree on the appropriate lawful basis or bases under which you are processing the data.
  • The next step would be to undertake a Data Protection Impact Assessment (DPIA). Completing a DPIA will document your approach to data protection compliance and identify and mitigate, or ideally eradicate, the privacy risks associated with your data processing activities.
  • Affected individuals must also be presented with a Privacy Notice to ensure fairness and transparency.

The Data Protection Act 2018 (DPA) is the UK’s implementation of the General Data Protection Regulation (GDPR). The DPA controls how personal information can be used and provides individuals with certain rights over their personal data.

Further guidance

Anonymous and pseudonymous data

Business as usual requests

Data controller or processor

Data sharing with third parties

Data subject rights

Emergency and police requests

Images of people

Information security

Opinions about individuals

Purpose or reason for processing

Recording conversations

Rights of children

Request information about yourself

Submit a Subject Access Request (SAR)

Related