Data Protection
The Brockley Cross Action Group (BCAG) is committed to meeting its obligations under the Data Protection Act of 1998.
BCAG will strive to observe the law in all collection and processing of subject data and will meet any subject access request in compliance with the law.
BCAG will only use data in ways relevant to carrying out its legitimate purposes and functions as a Voluntary Organisation and charity in a way that is not prejudicial to the interests of individuals.
BCAG will take due care in the collection and storage of any sensitive data. BCAG staff and voluntary workers will do their utmost to keep all data accurate, timely and secure.
All BCAG staff, whether permanent or temporary, and voluntary workers, must be aware of the requirements of the Data Protection Act when they collect or handle data about an individual.
BCAG staff and voluntary workers must not disclose data except where there is subject consent, or legal requirement.
All collection and processing must be done in good faith.
The BCAG Chair will keep records of all complaints by data subjects and the follow up. He/she will also keep a record of all data access requests.
There will be a repository of all BCAG statements of Data Protection Law compliance and information about any contacts made with the Data Protection Registrar.
This information will be available to staff, voluntary workers and data subjects on request.
BCAG will inform subjects of any processing, disclosure or data transfer that does not fall within BCAG’s purpose in a way that any individual supplying could be expected to understand.
BCAG will keep registration (now called notification) up to date.
Principles of data protection outlined in the Data Protection Act
Anyone processing personal data must comply with the eight enforceable principles of good practice.
These state that data must be:
1. fairly and lawfully processed
2. processed for limited purposes
3. adequate, relevant and not excessive
4. accurate
5. not kept longer than necessary
6. processed in accordance with the data subject's rights
7. secure
8. transferred only to countries that offer adequate data protection.
|