DATA PROTECTION POLICY - One Housing Group

Appendix B - Definitions of key termsDPA = Data Protection Act 1998SAR = Subject Access RequestDataData is information which is intentionally processed or recorded as part of an accessiblerecord.ProcessingProcessing of data is a broad term which includes a wide range of actions, includingcollecting, reading, recording, sharing, amending and storing. The government’sInformation Commissioner, who oversees the implementation of the Data Protection Act1998, says that “it is difficult to imagine any action involving data that does not amount toprocessing.”Data ControllerA person who determines the purposes for and the manner in which personal data are, orare to be, processed. This may be an individual or an organisation (e.g. OHG) and theprocessing may be carried out jointly or in common with other persons.Personal DataData which relates to a living individual who can be identified- from those data, or- from those data and other information which is in the possession of,or likely to come into the possession of the data controller.It includes any expression of opinion about the individual and any indication of theintentions of the data controller or any other person in respect of the individual.Sensitive DataSpecific provision is made under the DPA for processing sensitive personal information.This includes racial or ethnic origin, political opinions, religious or other beliefs, trade unionmembership, physical or mental health condition, sex life, criminal proceedings orconvictions.For sensitive personal data to be considered fairly processed, at least one of several extraconditions must be met. These include:• Having the explicit consent of the individual• Being required by law to process the information for employment purposesOne Housing Group Data Protection Policy Page 6 of 7