Protection of Data

Methods of Protecting Data

Why is it easier to misuse data stored electronically that data stored on paper?

  1. It is easy to hack into other computer systems from your own system, providing the necessary communication links such as a modem and telephone lines are present. ‘Hackers’ don’t have to physically visit the place where the data is stored.
  2. Alterations to data stored on paper are easy to detect. Electronic alterations show no clear evidence that changes have been made.
  3. Data accessed electronically is accessed much faster than manual files. Copies can be made a lot quicker than having to photocopy paper files.

Data stored on computer must be correct because:

  1. Companies that store incorrect personal data can be prosecuted under the Data Protection Act, 1984.
  2. Incorrect data can result in a customer being charged too much or too little. Either way a business loses money.
  3. Confidential communication, e.g. medical information or bank account details could end up being sent to the wrong person.
  4. Information falling into the wrong hands could assist criminals.
  5. In extreme cases firms could lose thousands or even millions of pounds!

 

Data can be lost due to physical, environmental or human influences:

 

The Data Protection Act (1984)

The Act requires employers using a computerised data system to register as data users. They must state

  • what information is being stored on computer
  • why it is stored in such a way
  • how and from where they have obtained it
  • to whom it will be disclosed.

The Data Protection Registrar must then try to ensure that personal data:

  1. is obtained and processed fairly and lawfully
  2. is held only for one or more specified and lawful purposes
  3. is adequate, relevant and not excessive
  4. is not kept for longer than necessary
  5. is stored in a way which prevents unauthorised access of accidental loss or destruction.

Additional safeguards are required in respect of personnel data covering

  1. racial origin
  2. political opinions or religious or other beliefs
  3. physical or mental health
  4. criminal convictions.

Employees have a right of access to all computerised information held about them and may claim compensation for damage and distress if the information is inaccurate.

Exemptions

The provisions of the Act do not apply to:

  1. data held for the purposes of national security
  2. the detection or prevention of crime
  3. calculating payroll or for keeping accounts
  4. household affairs or recreational purposes
  5. the subsequent preparation of text (such as documents held in a word processor)
  6. the purposes of recording the 'intention' of the data user.

 

Hosted by www.Geocities.ws

1