ABSTRACT
The Data Protection Principles which are derived from the Data Protection Act 1998 increase the responsibility of anyone who processes personal data, strengthen the individual's right to privacy, and ensure that the processing of personal data is done in accordance with the rights of individuals. The Principles state the following: The information to be contained in personal data shall be obtained, and personal data shall be processed, fairly and lawfully and shall not be processed unless certain conditions apply. Personal data shall be held only for one or more specified and lawful purposes. The Data Protection Act 1998 gives data subjects i.e. patients, clients, carers certain rights in respect to their own personal data held in any form computer and/or paper records. The Data Protection Act provides the grounds for legally enforceable standards that apply to the collection and processing of images of individuals.
