Data Protection Act question....

dpa

last time I did anything you had to register if you held info on people full stop.

The person in your company that needs to register is the business person responsible for the data. The IT dept need not register if all it does is hold and process on the behalf of eg the marketing dept.

If you ring them up they are quite helpful

Its now if you hold information on people (regardless of whether its on a computer or merely on paper in a filing cabinet somewhere).

Safest bet for companies is to register as soon as you start collecting any information beyond which agents you called today.

My own hazy and v old understanding of the basics of the DPA was that you had to register and comply with the act if you kept persons records on computer.

Is that correct and STILL the case?

Or: do you only have to worry about the DPA if you sell details on to other parties?

I need this for a work related thing, so sensible replies from those who actually know what they are talking about only, please.