|
Data Protection Act (DPA) |
This wonderful addition to our already complex legislation in the UK sets out how personal data may be kept/managed in order to protect individuals from improper usage/processing of data or from data being obtained without the necessary authorisation. In an employment context (given that that is what we do!) personal data includes information such as application forms, CVs, salary information, appraisals, disciplinary records etc. In a nutshell, all personal information must be fairly and lawfully processed, not excessive and kept no longer than reasonable.
The DPA gives individuals certain rights to access information held about them. Whilst the idea is good, the administrative burden of this Act is high which inevitably results in organisations taking risks by not complying. The Code of Practice on CCTV usage is 35 pages long, the CoP on employment practices is 91 pages, the supplementary guidance on employment practices is 86 pages long etc etc. Not surprisingly therefore, compliance with this Act is not a 5 minute job!
|