Good data protection practices ensure that an organisation and the individuals within it can be trusted to collect, store and use our personal data fairly, safely and lawfully.

All those who process others’ personal data have to follow strict rules.

These rules are set primarily by:

• the UK General Data Protection Regulation (UK GDPR)
• the Data Protection Act 2018 (DPA)