8 Rules of Data Protection
- Published: 19 April 2018
This is the first in our series of weekly action plans/information updates to help schools transition from the existing data protection framework under the EU Data Protection Directive to GDPR which will come into force on Friday 25 May 2018.
This week’s action plan focuses on 8 Rules of Data Protection:
- Obtain and process information fairly
- Keep it only for one or more specified, explicit and lawful purposes
- Use and disclose it only in ways compatible with these purposes
- Keep it safe and secure
- Keep it accurate, complete and up-to-date
- Ensure that it is adequate, relevant and not excessive
- Retain it for no longer than is necessary for the purpose or purposes
- Give a copy of his/her personal data to the individual on request.
IPPN is in the final stages of producing a resource bundle on this topic. Availability of this resource will be communicated in our weekly É-scéal and on the homepage of www.ippn.ie.
