Data security and legal issues

So today i will answer for the questions below.ENJOY!!!

What is the data protection Act?

The Data Protection Act 1998 (DPA) is a United Kingdom Act of Parliament which defines UK law on the processing of data on identifiable living people. It is the main piece of legislation that governs the protection of personal data in the UK.

Who is the information commissioner?

The role of Information Commissioner differs from nation to nation. Most commonly it is a title given to a government regulator in the fields of freedom of information and the protection of personal data in the widest sense. The office often functions as a specialist ombudsman service.(Note of ombudsman: n ombudsman or public advocate is usually appointed by the   *mahmood copyright* government or by parliament, but with a significant degree of independence, who is charged with representing the interests of the public by investigating and addressing complaints of maladministration or violation of rights. In some countries an Inspector General, Citizen Advocate or other official may have duties similar to those of a national ombudsman, and may also be appointed by the legislature.)

Who is the data controller? 

 data controller is the individual or the legal person who controls and is responsible for the keeping and use of personal information on computer or in structured manual files.  *mahmood copyright* Being a data controller carries with it serious legal responsibilities

who are the data subject? 

The data subject is the person whose personal data are collected, held or processed.

who are the data user?

A data user refers to a person involved in accessing and investigating integrated data sets for statistical and research purposes. This paper focuses on data users accessing integrated data sets created using at least one Commonwealth data set *mahmood copyright*, for statistical and research purposes.Data users include academics working in research institutions and employees undertaking research in Commonwealth and state/territory agencies. It can also include multiple data users working as part of a consortium, alliance or collaborative network. 

what is personal data?

Data which relate to a living individual who can be identified from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller, and includes any expression   *mahmood copyright*of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual - 

Data protection act:

1. Personal data shall be processed fairly and lawfully and, in particular, shall not be processed unless-
   1. at least one of the conditions in Schedule 2 is met, and
   2. in the case of sensitive personal data, at least one of the conditions in Schedule 3 is also met.
2. Personal data shall be obtained  *mahmood copyright* only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.
3. Personal data shall be adequate,  *mahmood copyright* relevant and not excessive in relation to the purpose or purposes for which they are processed.
4. Personal data shall be accurate and, where necessary, kept up to date.
5. Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
6. About the rights of individuals e.g.personal data shall be processed in accordance with the rights of data subjects (individuals).
7. Appropriate technical and organisational measures shall be taken against unauthorized or unlawful processing of  *mahmood copyright* personal data and against accidental loss or destruction of, or damage to, personal data.
8. Personal data shall not be transferred to a country or  *mahmood copyright* territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

Reference:

devon.gov.uk

http://ico.org.uk/ *mahmood copyright*

dataprotection.ie

.nss.gov.au

secure *mahmood copyright* .edps.europa.eu

and some of my own xD