As you just saw, the main purpose of the DPA principles is to protect the interests of the individuals whose personal data is being processed.
What is personal data?
Personal Data
Personal data means data which relate to a living individual who can be identified:
- from those data, or
- from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller.
It includes any expression of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual.
What is sensitive personal data?
Sensitive Personal Data
This means personal data consisting of information as to:
- The racial or ethnic origin of the data subject
- Their political opinions
- Their religious beliefs or other beliefs of a similar nature
- Whether they are a member of a trade union (within the meaning of the Trade Union and Labour Relations (Consolidation) Act 1992)
- Their physical or mental health or condition
- Their sexual life
- The commission or alleged commission by them of any offence, or –
- Any proceedings for any offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any court in such proceedings.
The presumption is that, because information about these matters could be used in a discriminatory way, and is likely to be of a private matter, it needs to be treated with greater care than other personal data.
