Appendix 5: Sample data protection policies

The National Portrait Gallery Data Protection Policy

1 Introduction

The National Portrait Gallery needs to keep certain personal data, for example about staff, visitors, sitters and artists, in order to fulfil its purpose. Under the provisions of the Data Protection Act 1998, which came into force on 1 March 2000, the Gallery has a legal duty to ensure that this personal information is collected and used fairly, stored safely and not disclosed to any other person or organisation unlawfully. The purpose of the Act is ‘to protect the fundamental rights and freedoms of natural persons, in particular their right to privacy’ and in doing so it also provides data subjects (i.e. individuals about whom ...

Get Records Management for Museums and Galleries now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.