Implications Of The Data Protection Act

The Data Protection Act was set in force on March 1, 2000. It states that organizations that collect, store, and use personal data must follow certain rules and regulations. Personal data about any living individual who can be identified by any information the organization my have obtained falls under this statement.

That seems simple enough. It is when you get to the other section of the act. The part that deals with sensitive personal data. This includes information regarding sexual orientation, ethnic origin, political beliefs, religious beliefs, and physical or mental health conditions.

Let's examine the latter for a moment. These days we are always signing forms at the doctors relating to privacy acts. What happens when they ask you for family history? Are you required to get a release form filled out by your parents or grandparents, siblings, aunts, uncles to give any conditions that have been passed down? What if the parents or some other family member has no desire to give up some of their personal information of their health conditions? Are their rights infringed upon here? What are the ethical implications in something like that? Also in the health field are nurses. Patients tend to speak openly to nurses about things. The nurse is usually the one taking care of you and they tend to be trusted by their patients. When the nurse is filling out files about their patients what information would be excessive?

What happens when an image is used? A photograph of an individual. Since you could visually tell their ethnic origin, is that infringing upon them. What if they sent a profile to an employer online. Will that image be used to "profile" the individual applying for a job?

You could say the same for college or school applications. Would an individual's application be processed without an image? Could they be discriminated against because of a picture in their file?

The legal and ethical obligations to companies, schools, employers are very important. There are rules and regulations set up by the data protection act. We must find ways to stay inside these guidelines and stay as ethical as possible.

Let’s take a look at the eight principles to the data protection act.

1. Fairly and lawfully processed 2. Processed for limited purposes 3. Adequate, relevant and not excessive 4. Accurate 5. Not kept for longer than is necessary 6. Processed in line with your rights 7. Secure 8. Not transferred to countries without adequate protection