5.4 Data protection

Show description|Hide description

A padlock inside a circle with the words ‘General Data Protection Regulation’ on its perimeter.

Data protection is about the fair and proper use of private information. It relates to a person’s essential right to privacy. On another level, it is also about building trust between people and organisations.

Data protection regulations are meant to ensure that you are treated fairly and openly. For example, your right to have control over your own identity and your interactions with others – so long as these do not have an adverse impact on the wider interests of society.

Technological innovation makes data protection increasingly important. Data protection laws and regulations are meant to establish public trust in how personal data is used and stored by both the private and public sectors.

In the UK, data protection is set out in the General Data Protection Regulation (GDPR) and the Data Protection Act (DPA) 2018.