Ownership of Files (Added May 2002)
THE DATA PROTECTION ACT 1998
Personal data held by a practice in relation to employees or clients is likely to give rise to a requirement to notify the Information Commissioner under the provisions of the Data Protection Act 1998. It is an offence to process personal data without notification. The Act is concerned not only with automatically processed information but also certain manual data.
Practice units should carry out regular audits to identify what categories of personal data are held and whether notification is necessary. Register entries should be kept up to date.
Detailed guidance, including notification templates for solicitors and a self-assessment guide are available on-line at:
www.informationcommissioner.gov.uk or direct from the Information Commissioner at: Information Commissioner's Office. PO Box 66, Wilmslow, Cheshire, SK9 5AX.