top of page


Your rights, responsibilities and obligations to data protection.

The Data Protection Act gives you the right to know what information is held about you and sets out rules to make sure that this information is handled properly. The Basic Data Protection Act gives individuals the right to know what information is held about them. It provides a framework to ensure that personal information is handled properly. The Act works in two ways. Firstly, it states that anyone who processes personal information must comply with eight principles, which make sure that personal information is:

1. Fairly and lawfully processed.

2. Processed for limited purposes.

3. Adequate, relevant and not excessive.

4. Accurate and up-to-date.

5. Not kept for longer than necessary.

6. Processed in line with your rights.

7. Secure.

8. Not transferred to other countries without adequate protection.

The second area covered by the Act provides individuals with important rights, including the right to find out what personal information is held on computers and most paper records. Should an individual or organisation feel they're being denied access to the personal information they're entitled to, or feel their information has not been handled according to the eight principles, they can contact the Information Commissioner's Office for help. Complaints are usually dealt with informally, but if this isn't possible, enforcement action can be taken.

Data Protection Acts 2018

Notifications Exemptions are possible for the following.

Data controllers who only process personal information for:

• Staff administration (including payroll).

• Advertising, marketing and public relations (in connection with their own business activity).

• Accounts and records.

Some not-for-profit organisations.

Processing personal information or personal, family or household affairs (including recreational purposes). Maintenance of a public register. Processing personal information without an automated system, such as a computer. If you are exempt, data controllers who are exempt from notification must still comply with the rest of the Act. Data controllers who are exempt from notification may choose to notify voluntarily.

Not-for-profit organisations

Data Protection Acts 1998

There is a specific exemption from notification for data controllers that are a body or association not established or conducted for profit, provided that their processing does not fall outside the

descriptions as follows:

As a not-for-profit organisation is all of your processing is covered by the following descriptions:

a. Your processing is only to establish or maintain membership or support for a body or association not established or conducted for profit or providing or administering activities for individuals who are either members of the body or association or have regular contact with it.

b. Your data subjects are restricted to the processing of those for whom personal information is necessary for this exempt purpose.

c. Your data classes are restricted to personal information that is necessary for this exempt purpose.

d. Your disclosures, other than those made with the consent of the data subject, are restricted to those third parties that are necessary for this exempt purpose.

e. The personal information is not kept after the relationship between you and the data subject ends unless (and for so long as) it is necessary to do so for the exempt purpose.

Please note that when submitting content, you will be deemed to consent to us:

i. Holding the content and making such content available to, consumers and any of our or agents or subcontractors.

ii. Holding and using the information you submit to us to send you, details of our selected services that we think you will find valuable.

iii. We will not pass your details to any third parties. If you would prefer your information not to be used in that way, please contact us, giving your name and address by email to

For further detailed information about the Data Protection Acts, please visit:

Data Protection Acts: Text
bottom of page