Data Protection Act 1998

The Data Protection Act 1998 came into force on 1 March 2000.  The law exists to strike a balance between the rights of the individuals to privacy and the ability of organisations to use data for the purpose of their business.

The purpose of the Act is to protect the rights of the individual about whom the data is obtained, stored, processed or supplied rather than those of the people or organisations who control and use personal data.  The Act applies to both computerised and paper records.

The Act requires that appropriate security measures will be taken against accidental loss or destruction of personal data.

It applies to anything at all done to personal data including the collection, use, disclosure, destruction or merely holding data.

The Act is based on eight principals stating that data must be:

1. Fairly and lawfully processed
2. Processed for limited purposes
3. Adequate relevant and not excessive
4. Accurate
5. Not kept for longer than is necessary
6. Processed in line with your rights
7. Secure
8. Not transferred to countries without adequate protection

By law, the Authority has to keep to these principals.

The Data Protection Act 1998 gives individuals who are the subject of personal data (“data subjects”) a general right of access to the personal data which relates to them.  These rights, know as “subject access rights” are contained in sections seven, eight and nine of the Act.

Individuals can make requests to the North York Moors National Park Authority and any other organisation (“data controllers”) that hold information about them. Such access to records and other information about those records is known as a “subject access request”.  Personal data may take the form of conputerised records or in some cases, paper records.

North York Moors National Park Authority like other “data controllers”, is obliged to reply promptly to such requests, and in any event respond within 40 days, providing, if required, the fee of £10.00 has been paid.

North York Moors National Park Authority may require additional information from those making a “subject access request”, including confirmation of identity, and sufficient information to locate the information requested.
 
Use the links below for further information.

Opens document - Data Protection Policy (PDF version)

Opens document - Subject access request form (word version)

Opens document - Subject access request form (PDF version)

For further information contact:

Data Protection Officer

North York Moors National Park Authority, The Old Vicarage, Bondgate, Helmsley, York, North Yorkshire, YO62 5BP, Tel: 01439 770657 – Fax: 01439 770691
E-mail – general@northyorkmoors-npa.gov.uk

The North York Moors National Park Authority fully support DEFRA'S public service guarantee on Data Handling which can be viewed at DEFRA'S website.