Bpp learning Media is an acca approved Content Provider

General Data Protection Regulation
(GDPR) but extends the protection by establishing a wider
framework of regulations. 
4.3 Definitions of terms used in the Act 
In order to understand the Act it is necessary to know some of the technical terms used in it. 

Personal data
is information about a living individual, including expressions of opinion about 
them. Data about organisations is not personal data. 

Data users 
are organisations or individuals who control or process personal data and the use of 
personal data. 

Data controllers
determine the purpose and means of processing personal data. 

Data processors
are responsible for processing personal data on behalf of a controller. 

Data subjects 
are individuals who are the subject of personal data. 
4.4 The data protection principles 
The 
UK Data Protection Act
includes six 
Data Protection Principles
with which data users must 
comply.
Principle 
Description 
Lawfulness, fairness and 
transparency 
Data can only be held if there are valid grounds to do so. Data can only be used 
fairly and with clarity, openness and honesty in how the data is used from the 
start.
Purpose limitation 
Data subjects must be made aware of the purpose for recording the data from 
the time it is first collected. This purpose must be specified, explicit and 
legitimate. Should data need to be used for a different purpose in future then 
consent from the data subject must be obtained unless there are legal grounds to 
do so otherwise.
Data minimisation 
Data held must be adequate (sufficient to fulfil the purpose), relevant (connected 
to the purpose for holding it) and not excessive (the minimum needed to fulfil 
the purpose).
Accuracy 
Data held must be accurate and not misleading. Reasonable steps should be 
taken to ensure there are no inaccuracies. Any data that is found to be 
inaccurate or misleading must be corrected.