Changes from the 1984 Act

1984 Act 1998 Act
Scope Automatically processed data only Both automatically processed and structured manual data (transitional provisions apply)
Personal data is about individuals, excluding statements of intention about individuals, including statements of intention
Classification of personal data only one class two classes, one of which can be processed only in specific circumstances
Data subjects have the right to be told what information is held about them what information is held about them, how it was obtained, why it is being processed and to whom it may be disclosed. They should also be told criteria for automated decisions.
Subjects can seek compensation after illegal processing has been done an injuction to prevent processing happening, or compensation after illegal processing has been done
Legal action can be against directors directors or managers
Personal data may be transferred to anywhere registered only within European Economic Area or other approved locations
Personal information owned by person called "data user" controlled by "data controller" and processed by "data processor"
Exemptions from the Act Many Even more!
Act policed by Data Protection Registrar Information Commissioner

Important notice

What you read here is only a summary to introduce the concepts. You should not rely on it to build a legal case or safeguard your legal position. The University of Glamorgan and its employees cannot be held responsible for any legal or other redress due to errors in the notes. Seek professional legal advice before acting on what you read here.

UpOther topics Comments please to: © 1999, 2001, University of Glamorgan