Data Protection
GETTING STARTED
If you are you collecting, storing, or otherwise using personal data or special category data, please familiarise yourself with the principles underpinning Data Protection legislation and apply them to your project.
- You will also need to consider and agree on the appropriate lawful basis or bases under which you are processing the data.
- The next step would be to undertake a Data Protection Impact Assessment (DPIA). Completing a DPIA will document your approach to data protection compliance and identify and mitigate, or ideally eradicate, the privacy risks associated with your data processing activities.
- Affected individuals must also be presented with a Privacy Notice to ensure fairness and transparency.
The Data Protection Act 2018 (DPA) is the UK’s implementation of the General Data Protection Regulation (GDPR). The DPA controls how personal information can be used and provides individuals with certain rights over their personal data.