The Data Protection Act 2018 (DPA) is an Act of Parliament of the United Kingdom of Great Britain and Northern Ireland which defines UK law on the processing of data on identifiable living people (Click here
for more information). It is the main piece of legislation that governs the protection of personal data in the UK and in essence, controls how your personal information is used by organisations, businesses or the government.
Everyone responsible for using data has to follow strict rules called ‘data protection principles’.
They must make sure the information is:
Kept safe and secure
Used fairly and lawfully
Used for limited, specifically stated purposes
Kept for no longer than is absolutely necessary
Handled according to people’s data protection rights
Used in a way that is adequate, relevant and not excessive
Not transferred outside the European Economic Area without adequate protection
While there is no law per se that states that confidential waste paper must be shredded, it is generally accepted that security shredding is the safest, securest and most environmentally friendly method of disposing of your confidential documents per the requirements of the DPA, which covers the stipulation of keeping your data “Safe and secure”.