why is data protection important?

If you are required to comply with the Act, you have a number of legal responsibilities:

- to notify the Information Commissioner you are processing information, unless you are an organisation who has personal information only for:

• staff administration (including payroll);
• advertising, marketing and public relations for your own business; or
• accounts and records (some not-for-profit organisations)

- to process the personal information in accordance with the eight principles of the Act; and

- to answer subject access requests received from individuals.