Data Protection Act facts for kids
Act of Parliament | |
![]() |
|
Long title | An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner’s functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes. |
---|---|
Territorial extent | United Kingdom of Great Britain and Northern Ireland |
Dates | |
Royal assent | 23 May 2018 |
Commencement | May 2018 |
Other legislation | |
Repeals/revokes | Data Protection Act 1984 |
Status: Current legislation
|
|
Text of the Data Protection Act as in force today (including any amendments) within the United Kingdom, from legislation.gov.uk |
The Data Protection Act 2018 is a law made by the British government in 2018. It took the place of an older law from 1998.
This law sets out important rules for anyone who uses or stores personal data about living people. It also gives special rights to the people whose data is collected. The law applies to data kept on computers, other digital systems, and even paper records.
Personal data means facts about you, like your address, phone number, email, or even your job history.
People or groups who use this information are called data controllers. The people the data is about are known as data subjects.
What is the Data Protection Act 2018?
This law helps make sure that your personal information is handled carefully and safely. It gives you control over how your data is used by others.
Key Rules for Handling Your Data
Here are the main rules, or principles, that organisations must follow when they have your personal data:
- If data is collected for one reason, it must not be used for a completely different reason.
- Your data should not be shared with other people or organisations unless you agree to it.
- You have the right to see what data any organisation stores about you.
- Organisations should not keep your data for longer than they need it, and it must be kept correct and up-to-date.
- Data should not be sent to places outside the European Economic Area unless it can be kept safe there.
- Organisations that store personal data must register with the Information Commissioner’s Office. This office helps make sure the rules are followed.
- If an organisation has your data, they must make sure it is secure and well protected from being lost or stolen.
- If an organisation has wrong information about you, you have the right to ask them to change it.