| |
Data Protection Act 1998 : The Department of Health - P&G: Org policy: Records management (Site not responding. Last check: 2007-10-24) |
 | | The Act implements EC Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data which was adopted on 25 October 1995 for implementation by 24 October 1998. |
 | | Data subjects should be informed of the identity of the data controller (this will usually be the NHS body), the purposes for which data are to be processed, and any other information needed to make the processing fair (see paragraph 2(3) (d) of Part II of Schedule 1). |
 | | Data legitimately processed for research or statistical purposes, as long as such processing neither causes substantial harm or distress to the data subject nor is used to support measures or decisions in relation to individuals, are exempt from certain provisions of the Act. |
| www.dh.gov.uk /PolicyAndGuidance/OrganisationPolicy/RecordsManagement/DataProtectionAct1998Article/fs/en?CONTENT_ID=4000489&chk=VrXoGe (4985 words) |