Training

• Compliance with the Data Protection Act requires training to develop a culture among staff that recognizes the importance of understanding the act, good security to protect information and the consequences of a data breach. Training is available through books, DVDs, online study and in-person training courses.
  
  The Privacy Laws and Business website, for example, offers a series of data protection training workshops tailored to the requirements of those dealing with data in different contexts, such as human resources, health care, legal purposes and commerce.
  
  

Personal Data

• The Data Protection Act governs personal data. This is any information relating to a living individual that can, directly or indirectly, identify that individual. Sensitive personal data is information that relates to an individual's race, ethnicity, political views, health, criminal record, alleged criminal offenses or sexual persuasion.
  
  

Individual Rights

• An individual has the Subject Access Right, which is the right to make a written request to a data collector to obtain details of the specific information held about himself or herself.