UK Information Commissioner Issues Guidance on Deleting Personal Data and the Use of Cloud Computing

October 24, 2012

The UK Data Protection Act 1998 (DPA) imposes various restrictions on “data controllers”, such as employers, when “processing” personal data relating to individuals. In particular, employers must comply with eight data protection principles when processing personal data about their employees. The Information Commissioner’s Office (ICO) has recently published guidance papers on two particular areas on which these principles impact: deletion of electronically stored data (including whether employers must disclose deleted or archived data in response to a Data Subject Access Request), and the use of cloud computing. This Dechert OnPoint summarises the advice provided by these guidance notes.

Read “UK Information Commissioner Issues Guidance on Deleting Personal Data and the Use of Cloud Computing.”