From the 24th of October 2002, the Data Protection Act 1998, which applies to local government, NHS Trusts, Schools, Universities and all UK organisations who process personal information, comes into full force. The Data Protection Act 1998 gives people more rights to have their personal information handled fairly, to object to certain types of processing and to have access to any information held about them. Who should attend: These briefings have been designed for those who are responsible for the implementation of the Data Protection Act 1998. The practical as well as the theory will be dealt with and attendees will have the opportunity to discuss Data Protection business issues with experts and other delegates. Briefing Content: Morning session - Introduction a) The Data Protection Act and its Principles b) Responsibilities c) Policies and Notification d) Dealing with sub-contractors e) Subject Access f) Manual Records g) Human Resource Afternoon Session - Auditing a) Do you need to Audit? b) How to Audit c) Do you know what data you process? d) Reviewing Responsibilities e) Procedures and Processes f) Putting Things Right g) Demonstrating Compliance About the eBusiness Club This training day is being organised as part of the eBusiness Club activities managed on behalf of the Chamber on Merseyside by MERIT (NW) Ltd and supported by leading public and private sector partners. The Merseyside eBusiness club will assist members to achieve the best possible results from their ICT and eBusiness systems. At the same time they will learn about innovations in the market place and hear directly from the leading voices in the industry Full details about the eBusiness Club can be found online at www.merit.org.uk/ebusinessclub or alternatively by contacting Ian Bulmer, eBusiness Club Co-ordinator, MERIT (NW) Ltd, One Old Hall Street, Liverpool. L3 9HG. Tel: 0151 285 1400 email: ebusinessclub@merit.org.uk

5. Introductions

6. Definitions

11. The Eight Principles

25. Responsibilities

33. Notification

43. Data Processors

46. Subject Access Procedures

52. Manual Records

54. Human Resources

56. Do you need to audit?

58. What an audit should achieve

62. Data audit

65. Review responsibilities

67. Procedures and processes

100. How to carry out an audit

108. Thank you Any Questions? Alan Shipman 07702-125265 [email_address]