Data Protection guidance

Under the Data Protection Act 1998 researchers are responsible for the personal data they obtain and the subsequent use they make of it.

As a general rule researchers may process personal data in accordance with Section 33 of the Act.

However, researchers should bear in mind the following when handling personal data:

1. The Act only applies to the personal data of living individuals
2. Do not use personal data to support measures or decisions concerning an individual
3. Do not use personal data to cause substantial damage or distress to individuals
4. Whenever possible depersonalise or anonymise personal data
5. Keep personal data secure
6. Do not disclose personal data to anyone else without ensuring you do so in accordance with the Act.

Further information on data protection legislation is available on the Information Commissioner’s website.

Please note that this information is not intended as legal advice, or a substitute for it, but is guidance intended to provide practical support and to promote good practice.