Data Protection Act
This act protects individuals' privacy by regulating how personal information, known in the act as "personal data", is collected and used. The act applies to information stored electronically or in manual systems.
"Personal data" is any information that relates to a living individual who can be identified:
- from that information or,
- from that and other information in our possession or likely to come into our possession.
Personal data can include:
- email addresses or telephone numbers, collected when people enter competitions, sign up for a newsletter or become part of a programme's database of contributors.
- information about people we collect for use in programmes, including images and sound recordings.
The act requires that personal information is:
- collected and used fairly i.e. we make it clear to people how we intend to use their information and whether it will be given to anyone else inside or outside the BBC.
- appropriate to the uses which have been agreed.
- accurate.
- stored for the minimum time relevant to the use for which it is collected.
- stored securely.
- disposed of securely once the use for which it has been collected has come to an end.
- protected by a contract, if it is being given to an agent of the BBC (for example to distribute tickets or conduct surveys) or to a third party to ensure the information is only used for the purpose the BBC has agreed. A contract is also needed if personal information is being sent to a third party or agent of the BBC located outside the EU.
Material acquired for journalistic, artistic or literary purposes is exempt if compliance with the act would frustrate the journalistic purpose. For example, we do not need consent of someone being filmed committing crime.
People have certain rights under the act in relation to information stored about them.
Content producers with any queries about the act should contact the Information Policy & Compliance Department (IPC) or the Regulatory Legal department.
Any formal requests for information or notices to stop processing under the act must be dealt with by IPC. Pass any such requests immediately to IPC.