to download a copy of the staff handbook. - Downing College

Data protection continued...
SECTION 3.14
• Be adequate, relevant and not excessive for those purposes;
POLICIES & PROCEDURES
• Be accurate and kept up to date;
• Not be kept for longer than is necessary for those purposes.
• Be processed in accordance with the data subject’s rights under the
1998 Act;
• Be the subject of appropriate technical and organisational measures
against unauthorised or unlawful processing, accidental loss or
destruction;
• Not be transferred to a country outside the European Economic Area,
unless that country or territory has equivalent levels of protection for
personal data.
iv.
Personal data
“Personal data” are data which relate to a living individual (the “data
subject”) who can be identified from the data themselves or from the data
read together with other information which is in, or is likely to come into,
the possession of the person holding the data (the “data controller”).
They include any expression of opinion about the data subject and any
indication of the intentions of the data controller or any other person in
respect of the data subject. “Data” are of four types: (a) information
which is being processed by means of equipment operating automatically
in response to instructions given for that purpose; (b) information
recorded with the intention that it should be processed by means of such
equipment; (c) information which is recorded as part of a filing system so
structured by reference to individuals or to criteria relating to individuals
that specific information relating to a particular individual is readily
available, or information recorded with the intention that it should form
part of a such a filing system; and (d) any other accessible record
(whether electronic or other) apart from one dealt with by other
legislation (i.e. health records, school records, and social services
records).[Data Protection Act 1998, sections 1(1), 68 and 69, and
Schedules 11 and 12]
Data protection policy
STAFF HANDBOOK 91