6. Data Protection
Introduction
The Data Protection Act 1998 came into effect on 1 March 2000 and works in two ways. It gives individuals certain rights. It also says those who record and use personal information must be open about how the information is used and must follow the eight principles of 'good information handling'.
Principles
Anyone processing personal data must comply with the eight enforceable principles of good practice. They say that data must be:
- Processed fairly and lawfully
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate and up-to-date
- Not kept longer than necessary
- Processed in accordance with the data subject’s rights
- Secure
Not transferred to countries outside European Economic Area (EEA) without adequate protection
Subject Access
The Subject Access provisions of the Data Protection Act gives an individual the right to have a copy of any personal data held on them.
Section 7 of the Data Protection Act 1998 states that a "data subject" (the person about whom the personal data refers) is entitled, upon written request, to be informed whether or not personal data is held or processed about them.
Should you wish to know what information (if any) Nottinghamshire Police holds about you, or you would like confirmation that you do, or do not have a prosecution/conviction history, you must complete a Subject Access application form. Payment of a £10.00 fee and proof of identification must accompany a completed form. An application form and covering note can be downloaded from our library or by writing to:
Subject Access Request Bureau (AJ)
Nottinghamshire Police Headquarters
Sherwood Lodge
Arnold
Nottingham
NG5 8PP
Please note that once we have received your completed application the process to provide you with the information can take up to 40 days.