Data Protection Act : The Register

With only a few exceptions any data controller who holds personal data on computer must register with the Information Commissioner. When a data controller registers an entry is made in the Data Controller Register detailing the data that will be stored. Each entry contains the following information :

• The data controller’s name.
• The data controller’s address.
• A description of the data to be stored.
• The purposes for which the data are used.
• The people to whom the data controller may wish to disclose the information.
• Any overseas countries to which the data controller may wish to transfer the personal data.
• A general description of the security measures taken to protect the data.

A data controller who only stores records on paper does not have to notify the Commissioner. The controller will not therefore be entered in the register, but he will have to follow the rules set out by the Act.

GCSE ICT Companion 04 - (C) P Meakin 2004