parish policy on data protection

The Parish of St Agnes Longsight has adopted a policy to conform to the principles of the Act.
You can download the Parish Data Protection Policy here.
DATA PROTECTION ACT 1998
The Data Protection Act 1998 (the DPA) aims to promote high standards in the handling of personal information and
so protect the individual’s right to privacy. The DPA applies to firms and charities (such as churches) holding
information about living individuals in electronic format and, in some cases, on paper. They must follow the eight data
protection principles of good information handling. These say that personal information must be:
• fairly and lawfully processed;
• processed for specified purposes;
• adequate, relevant and not excessive;
• accurate and, where necessary, kept up to date;
• not kept for longer than is necessary;
• processed in line with the rights of the individual;
• kept secure; and
• not transferred to countries outside the European Economic Area unless the information is adequately protected.