What is the DPA (Data Protection Act 1998)?
The DPA came into force on 1 March 2000, and was created to protect the privacy of the customer. It is the principal legislation in the UK governing the way in which personal information is handled, and all credit card companies work within its boundaries.
When you make your application you will be asked to provide information which may be personal so that the credit card company can process your application, maintain your account and provide you with relevant marketing information. The credit card company will agree not to use any personal information which you provide unless you say that they can do so. You can opt out from receiving marketing communications.
The DPA works in two ways. As credit card customer it gives you the right to see a copy of your personal information held by your credit card issuer on payment of a fee. You can challenge it if appropriate and claim compensation in certain circumstances as set out in the Data Protection Act.
Secondly, the DPA imposes certain obligations on those who record and use personal information i.e. your credit card company. They must be open about how the information is used and must comply with the eight data protection principles.
These data protection principles say that personal information must be:
- fairly and lawfully processed
- processed for limited purposes
- adequate, relevant and not excessive
- accurate
- not kept for longer than is necessary
- processed in line with your rights
- secure
- not transferred to countries without adequate protection
|