Data Protection Act 1998

Ocellics Ltd is a notified company under the UK Data Protection Act 1998 (DPA).  This is a legal requirement for any company that holds information on living people in either an electronic or paper format.

The DPA requires that companies follow the eight data protection principles of good information handling. These principles say that personal information must be:

• Fairly and lawfully processed
• Processed for specified purposes
• Adequate, relevant and not excessive
• Accurate and kept up to date where necessary
• Not kept for longer than necessary
• Processed in line with the rights of the individual
• Kept secure
• Not transferred to countries outside the European Economic Area unless there is adequate protection for the data

Are you compliant? Further information, FAQ’s and a checklist of indicative questions are provided by the UK Information Commissioner’s website www.informationcommissioner.gov.uk.