ENTREPRENEUR HANDBOOK

No Result
View All Result
  • Finance
  • Technology
  • Marketing
  • Human Resources
  • Insurance
  • Legal
  • Procurement
  • eCommerce
  • Leadership
Advertisement
ENTREPRENEUR HANDBOOK
No Result
View All Result
ENTREPRENEUR HANDBOOK
No Result
View All Result
Legal

Data protection act: What it means in practice for UK businesses

Learn about the data protection act and how it affects your business no more than ever, it is necessary for you to be compliant

By Jonathan Segal | Updated July 27, 2021 (Published 30/10/2013)

Related posts

  • Data Protection Act: How to remain compliant
  • Top 100 asset finance companies & providers for UK businesses
  • Why data protection is a top priority for your business

Please note due to GDPR this post and its content are largely out of date, at some point we will likely be updating this post, until then please checkout the latest information on UK data protection regulations at ICO.

Related posts

Why data protection is a top priority for your business

4 Ways startups deal with privacy issues and data protection laws

Entrepreneur’s guide to choosing the right BI tool

It is important to be aware of the data protection laws that may affect the running of your business and to be kept fully up to date.

Handling personal data

Any data which can be used to identify an individual is ‘personal data’. Your new company will undoubtedly handle personal data (such as customer and supplier databases and employee records) and therefore must make a notification to the Information Commissioner about their data processing activities as a Data Controller. Certain exceptions do apply for very small companies who only process for very limited purposes but it is very easy to fall outside of these so we recommend notification as it is cheap and failure to do so is a criminal offence.

How data is processed

A Data Controller has responsibility for the way in which data is processed and is defined as any organisation or individual who is responsible for determining how and why personal data is processed. A Data Controller has a legal obligation to protect the data and process it fairly and lawfully.

Data controller

Where a Data Controller appoints a supplier to carry out processing and the supplier does nothing with the data on its own initiative, the supplier will be a Data Processor rather than Data Controller. A Data Processor has no direct obligations under the legislation, but the Data Controller must ensure it has a written contract with the Data Processor to ensure that the Data Processor complies with instructions of the Data Controller and certain other aspects of the legislation.

Transfer of data

Transfer of personal data outside the EEA (even for intra-company transfers) is, subject to certain exceptions, prohibited unless the data subject has consented or an approved transfer mechanism is used. Data Controllers should, therefore, be mindful of where they host the personal data.

Change in data protection laws

You should also be aware that Data protection laws in Europe are currently undergoing major reform. Europe’s Data Protection Directive (which is the European legislation that national data protection laws, including the Data Protection Act 1998, are derived from) is to be replaced with a new Data Protection Regulation. Compliance will become harder in Europe and consequences of non-compliance riskier – with the potential of fines of up to 2% of global annual turnover. If you would like advice on getting ready for the new Data Protection Regulations and data protection act, its fully updated to 2017.

In light of the above, you should, therefore, consider taking advice in the early stages of creating your company with regards to:

  • the need to make a notification to the information commissioners;
  • establishing policies and procedures to protect data correctly;
  • ensuring that contracts with suppliers contain, at a minimum, the clauses required by the legislation; and
  • complying with the rules regarding transferring data outside the EEA.

Related topics

Tags: Business data

Related Posts

Cyber security

Why data protection is a top priority for your business

Today, we are living in a data economy where the value of a single piece of data could be immeasurable...

Published by Editorial team
30th March 2021
Read more
Cyber security

4 Ways startups deal with privacy issues and data protection laws

Customer privacy is not always among the top concerns of startups and small businesses. Many small organisations seem to think...

Published by Editorial team
30th March 2021
Read more
Software

Entrepreneur’s guide to choosing the right BI tool

For a young business in today’s data-driven world, understanding the state of your operations, customers, and market is easier than...

Published by Editorial team
14th November 2019
Read more
Advertisement
Advertisement
Entrepreneur Handbook

Copyright © 2013 – 2025 Entrepreneur Handbook Ltd. All rights reserved. Registered offices at 20-22 Wenlock Road, London, N1 7GU, UK.

Sections

  • Finance
  • Technology
  • Marketing
  • Human resources
  • Insurance
  • Legal
  • Procurement
  • eCommerce
  • Leadership
  • Luxury
  • Start a business

Information

  • Advertise with us
  • Privacy policy
  • Terms of use
  • Contact us

Copyright © 2013 – 2025 Entrepreneur Handbook Ltd. All rights reserved. Registered offices at 20-22 Wenlock Road, London, N1 7GU, UK.

  • Finance
  • Technology
  • Marketing
  • Human resources
  • Insurance
  • Legal
  • Procurement
  • eCommerce
  • Leadership
  • Advertise with us
  • Privacy policy
  • Terms of use
  • Contact us

Copyright © 2013 - 2025 Entrepreneur Handbook Ltd. All rights reserved. Registered offices at 20-22 Wenlock Road, London, N1 7GU, United Kingdom.