data protection act 1998

• care environments handle data all time, patient records, test results, care plans, staff employment records, emails and phone calls
• eight principles of data protection act aim to ensure that data is used only as it should be, shared with authorised people who need to know, kept safe and secure
• eight principles of act state that information and data should be
• 1

  processed fairly and lawfully
• 2


  used only for purposes for which it was intended
• 3

  adequate and relevant but not excessive
• 4

  accurate and kept up to date
• 5


  kept for no longer than necessary
• 6


  processed in line with the rights of individual
• 7


  secured and safe
• 8


  not transferred to other countries outside EU