Guidance index: data protection, privacy and electronic communications

Here you can view a full index of data protection and privacy and electronic communications guidance for organisations.

Audits CCTV Credit and finance Crime mapping Data processing Data sharing Data protection - general Education Employment Identity scanning International transfer Marketing

Monetary penalties  MPs and elected officials  Notification  Online Personal data Privacy and electronic communications - general Privacy by design Privacy notice  Relevant filing system  RFID  Security  Subject access  Telecommunications

Audits

• Assessment notices code of practice 
• Guide to ICO data protection audits
• Guide to ICO advisory visits

CCTV

• CCTV code of practice 2008 
• CCTV in pubs – FAQs 
• ICO view on CCTV in pubs

Credit and finance

• Credit agreements - data sharing 
• Filing defaults with credit reference agencies 
• Tied agents and independent financial advisers

Crime mapping

• Crime mapping advice

Data processing

• Identifying data controllers and data processors

Data sharing

• Buying and selling customer databases 
• Data sharing checklists
• Data sharing code of practice 
• Disclosure of employee information under TUPE 
• Freedom of Information. Access to information about public authorities' employees 
• Releasing information to prevent or detect crime 
• When can I disclose information to a private investigator?

Data protection – general

• The Guide to Data Protection 
• Getting it right: small business checklist 
• Taking a positive approach to information rights 
• Training checklist for small and medium sized organisations

Education

• Publication of examination results by school 
• Taking photos in schools 
• The use of biometrics in schools

Employment

• Employment practices code 
• Employment practices code - a quick guide 
• Employment practices code - supplementary guidance 
• Getting it right: a brief guide to data protection for small businesses 
• Monitoring under section 75 of the Northern Ireland Act 1998

Identity scanning

• Use of ID scanning devices in pubs and clubs

International transfer

• International transfers - legal guidance

Marketing

• Calling customers listed on the Telephone Preference Service 
• Charities and marketing 
• Corporate Telephone Preference Service 
• Electronic mail marketing 
• Promotion of a political party

Monetary penalties

• Monetary penalties statutory guidance

MPs and elected officials

• Advice for the elected and prospective members of local authorities 
• Advice to local authorities on disclosing personal information to elected members 
• Disclosures to members of Parliament carrying out constituency casework

Notification

• Notification: a brief guide 
• Notification exemptions - a self-assessment guide 
• Notification fee changes - what you need to know 
• Notification handbook - A complete guide to notification 
• Notification of barristers' chambers 
• Notification of pension scheme trustees 
• The exemption from notification for ‘not-for-profit’ organisations

Online

• Personal information online code of practice 
• Personal information online: small business checklist

Personal data

• Determining what is personal data 
• What is ‘data’ for the purposes of the DPA 
• What is personal data? - A quick reference guide

Privacy and electronic communications - general

• The Guide to Privacy and electronic communications
• Advice on the new cookies Regulations 
• PECR security breach notifications – guidance for service providers

Privacy by design

• Privacy Enhancing Technologies 
• Privacy Impact Assessment - an overview

Privacy notice

• Getting it right: collecting information about your customers 
• Privacy notices code of practice

Relevant filing system

• FAQs and answers about relevant filing systems

RFID

• Radio frequency identification

Security

• Guidance on data security breach management
• Notification of data security breaches to the Information Commissioner’s Office

Subject access

• Access to information held in complaint files
• Access to personal information held by schools in England 
• Access to personal information held by schools in Northern Ireland 
• Access to personal information held by schools in Scotland
• Access to personal information held by schools in Wales 
• Access to personal information held by schools in Wales (Welsh) 
• Checklist for handling requests for personal information (subject access requests) 
• Dealing with subject access requests involving other people's information
• Disproportionate effort 
• Individuals' rights of access to examination records
• Regulatory activity exemption
• Subject access and employment references 
• Subject access requests and health record requests by members of the public 
• Subject access requests and legal proceedings

Telecommunications

• Code of practice on telecommunications directory information covering the fair processing of personal data