How does Records Management relate to the Data Protection Act?
The Data Protection Act applies to personal information relating to living individuals. The gathering, storage and processing of that data has to conform with a number of principles including its gathering and retention for specific purposes, the secure retention of the data, the ability to recover it when a Data Subject submits a request, and ensuring that it is kept for no longer than is necessary for the purpose for which it is held. Good records management policies and procedures will ensure that there is compliance with the Act.
