The Data Protection Act 1998 governs the use of personal information by businesses and other organisations. If you use personal information as part of your business, for example, because you hold customer details or employee details, you will need to comply with it. The Data Protection Act governs the use of personal information through the eight data protection principles. These principles require that personal information is:

Processed fairly and lawfully

Processed for one or more specified and lawful purposes, and not further processed in any way that is incompatible with the original purpose

Adequate, relevant and not excessive

Accurate and, where necessary, kept up to date

Kept for no longer than is necessary for the purpose for which it is being used

Processed in line with the rights of individuals

Kept secure with appropriate technical and organisational measures taken to protect the information

Not transferred outside the European Economic Area

If you are required to comply with the Act, you have to notify the Information Commissioner you are processing information. Our service for notification costs £50.00. Price includes £35 government fee. The period of notification is one year.