Data Protection

DESS fully endorses and adheres to the eight principles of the Data Protection Act.

These principles specify that personal data must be:

• Processed fairly and lawfully.
• Collated for a specified and lawful purpose and shall not be processed in any manner incompatible with that purpose.
• Adequate, relevant and not excessive.
• Accurate and kept up to date.
• Not kept for longer than is necessary.
• Processed in line with the data subject’s rights.
• Kept secure from unauthorised or unlawful access.
• Not transferred to a country or territory which does not have adequate data protection laws.

Information about The Data Protection Act can be found at:

https://www.gov.uk/data-protection