Small and medium sized businesses should take a look at the Information Commissioner’s website where they can, to take part in a data protection self-assessment.
The purpose of the toolkit is to help SMEs to evaluate and improve compliance with the Data Protection Act 1998 (“Act”).
Under the Act, all businesses are required to:
- use personal information fairly and lawfully;
- collect only the information necessary for a specific purpose(s);
- ensure it is relevant, accurate and up to date;
- only hold as much as you need, and only for as long as you need it;
- allow the subject of the information to see it on request; and
- keep it secure.
The website and assessment contains useful information for business to ensure that they are compliant with their obligations under the Act.
