How do I know whether the Data Protection Act 1998 applies to my business/organisation?
Those that are exempt from compliance with the Data Protection Act 1998 include: • An individual holding information for only personal reasons (e.g. an address book or Christmas card list) • An organisation holding personal information only for: – staff administration (including payroll) – advertising, marketing and public relations for your own business – accounts and records (some not-for-profit organisations) You will probably be required to comply with the Data Protection Act 1998, and to ‘notify’ the Information Commissioner (this office regulates and enforces the Act) that you are processing personal data. Visit www.ico.gov.uk to determine whether the Act applies to your business, and confirm whether you need to notify the ICO. Alternatively, you can contact the Commissioner’s Notification Helpline – 01625 545740. Click here to go to the Compliance checklist to see whether your business needs to notify the Information Commissioner.
