Pillar Kincardine Policy   -   Data Protection   -  Revised version adopted 24 April 2011

Data Protection

Statement of Scope and Purpose

This policy applies to everyone connected with Pillar Kincardine, whether service users, advisers, volunteers or staff.  Its aim is to ensure that all those involved with Pillar Kincardine are aware of:

• what, if any, personal data is held by Pillar Kincardine regarding them
• measures to protect them from any misuse of such data
• their right to a confidential service from the organisation
• their responsibilities regarding the security of personal data.

Commitment

All personal details held by Pillar Kincardine both manually and in computer records are subject to the Data Protection Act 1998.  Pillar Kincardine is committed to complying fully with the Act's eight Data Protection principles and will, accordingly:

• collect only personal data necessary to deliver services in a professional manner and to fulfil its responsibilities in respect of any contract or service level agreement with funding bodies
• ensure to the best of its ability that such data are relevant, accurate and not excessive
• take all reasonable steps to protect personal data from accidental disclosure or theft
• review the personal data held by the organisation annually and destroy any information held on any person who has had no contact with Pillar in the preceding year
• carry out an annual audit of its data protection practice to ensure that it remains in compliance with the eight Data Protection principles

In addition, members of and advisers to the Board of Directors, volunteers, and members of staff will be required to make a written, personal commitment to uphold the aims of this policy.

Disclosure

Pillar Kincardine will not in normal circumstances pass on personal data to a third party without the express permission of the person involved.  However, Pillar Kincardine has a common law duty of care, and where the organisation believes that there is a risk of serious harm to a person or to others, then, and only in these exceptional circumstances, information may be passed to the appropriate authorities.  If practicable, Pillar Kincardine will inform the person in advance of any such disclosure to a third party.

Review

Any member of, or person connected with, Pillar Kincardine can ask to see any data held on them at any time by contacting Pillar Kincardine's Registered Office, when a time for viewing the information will be agreed within a period not exceeding 10 working days.

Pillar Kincardine Policy   -   Data Protection   -  Revised version adopted 24 April 2011