What are the main principles of the data protection act?
The Data Protection Act (DPA) is a United Kingdom Act of Parliament. It defines a legal basis for the handling in the UK of information relating to living people. It is the main piece of legislation that governs protection of personal data in the UK. Although the Act does not mention privacy, in practice it provides a way in which individuals can enforce the control of information about themselves. Most of the Act does not apply to domestic use,[1] for example keeping a personal address book. Organisations in the UK are legally obliged to comply with this Act, subject to some exemptions. Compliance with the Act is enforced by an independent government authority, the Information Commissioner’s Office (ICO). The ICO maintains guidance relating to the Act.[2] The Act defines eight principles of information-handling practice. The UK Data Protection Act is a large Act that has a reputation for complexity.[3] While the basic principles are honoured for protecting privacy, interpreting the ac
