Small firms unsure of Data Protection obligations
One in four small–businesses owners do not believe their firm is meeting its obligations under the Data Protection Act (DPA), software firm Invu has warned. All businesses that store people’s personal details, such as customer or employee records, are required to comply with the DPA. The Act also states that individuals have the right to access the personal information that businesses hold about them. However, the Invu research revealed that a third of small firms failed to realise that the DPA includes all paper–based documents and not just those stored electronically. Invu chief executive David Morgan said: “The premise of the Data Protection Act is very solid but implementing and managing it is not quite so clear, so it’s little wonder that many SMEs are co... »