University seminar on data protection

A data Protection Seminar, outlining the implications of the new 1998 Data Protection Act which came into force on 1 March 2000, was held on 11 April at the University Museum. More than 150 representatives from departments, colleges, and central administration attended. The new Act covers personal data held on computer and also in manual or paper form. There are eight Data Protection Principles, the first of which states that personal data must be processed `fairly and lawfully'—for example, people must know who is collecting their data and why. Simply holding information in a database is classed as processing and is subject to the Act. A new principle has been introduced which restricts the transfer of personal data outside the European Economic Area. This has particular implications for the placing of data on the world wide web; with only limited exceptions consent will be required for this. Secondary legislation and guidance are still awaited from the Office of the Data Protection Commissioner. Internal consultation will continue and developments will be passed on to nominated contacts.