(Don't let the title put you off – please keep reading for this light summary of the Data Protection Act: a key piece of legislation that affects most businesses in the UK)
No discussion on data protection is complete without a brief mention of the rapid and huge growth of the on-line world.
Since 1998, technology has moved on and the law is yet to catch up in full. Although other laws such as the Privacy and Electronic Communications (EC Directive) in 2003 have brought in some rules about electronic marketing and advertising and the use of data collection techniques such as the use of cookies, there is still progress to be made. Change is afoot, so watch this space!
the bad news…
I am probably not conforming to good journalistic practice by giving the bad news first, but there is no hiding from it… data protection is boring. In all fairness, even amongst lawyers who are not renowned for their effervescence, data protection is not regarded as one of the "sexy subjects".
I do therefore have some sympathy with business owners who have to get grips with the matter, understand and manage it within their business. But whether you like it or not, data protection is important and potentially affects nearly every business in the UK.
So, what's the good news? Read on…
the good news…
Understanding whether or not you have obligations under the Data Protection Act and making sure you are compliant, does not have to be difficult or expensive and does not have to take loads of time. The Information Commissioners Office ("ICO"), (the body tasked with enforcing data protection law in the UK), has a very helpful web- site www.ico.gov.uk/for_organisations/data_protection.aspx with good guidance notes and a free help-line to help you work out what you need to do, to help you comply with the Data Protection Act.
So, I am not going to repeat all of that here, but I want you to understand why it is important and to give you a flavour of what the law says, without sending you to sleep!
what do you need to know?
You need to know whether or not you or your business is a Data Controller (see lingo below) and if so, what your obligations are under the Data Protection Act.