Guidance note : guidance for controllers on data security

Abstract

Data controllers in the private and public sectors hold increasing amounts of personal data on individuals. The decreasing cost of electronic storage and processing has greatly contributed to this. Organisations also increasingly outsource data processing to third parties to undertake on their behalf (data processors). Many organisations also continue to hold large quantities of personal data in manual form – often in off-site locations. This large increase in the quantity of personal data processed and held gives rise to security challenges for the organisations that collect the data. Data controllers need to regularly audit their holdings of personal data and the procedures they have in place to protect this data.