It’s very important to properly and effectively delete any personal information before you sell or dispose of your hardware (for example hard disks) . In UK, this issue is determined by law regulations. The example of those kind law regulations are Data Protection Act 1998, the Freedom of Information Act 2000, the Privacy and Electronic Communications Regulations 2003 and the Environmental Information Regulations 2004.
1. The Data Protection Act 1998 (DPA)
The Data Protection Act 1998 (DPA) is a United Kingdom Act of Parliament. It defines UK law on the processing of data on identifiable living people. It is the main piece of legislation that governs the protection of personal data in the Unite Kingdom.
The Data Protection Act controls how your personal information is used by organisations, businesses or the government. Anyone who processes personal information must comply with eight principles of the Data Protection Act, which make sure that personal information is:
- Fairly and lawfully processed
- Processed for limited purposes
- Adequate, relevant and not excessive
- Accurate and up to date
- Not kept for longer than is necessary
- Processed in line with your rights
- Not transferred to other countries without adequate protection
Let’s see Data Protection Act 1998 here>>
2. The Data Protection Directive
The Data Protection Directive (officially Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data) is a European Union directive which regulates the processing of personal data within the European Union. It is an important component of EU privacy and human rights law. On 25 January 2012, the European Commission unveiled a draft European General Data Protection Regulation that will supersede the Data Protection Directive.
Let’s see DIRECTIVE 95/46/EC OF THE EUROPEAN PARLIAMENT AND OF THECOUNCIL of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data here>>
3. The General Data Protection Regulation
The General Data Protection Regulation (GDPR) came into force on May 25.2018.
If you run a business located in EU, according to the new regulations, you are obliged to permanently data removal from data media.
Let’s see The General Data Protection Regulation here>>