§ Mr. Cohen
asked the Secretary of State for the Home Department if he will describe the procedures he has established to ensure that personal data exempt from the Data Protection Act via section 27 are relevant and not excessive in relation to the purposes for which the personal data are collected.
§ Mr. David Waddington
The Data Protection Act imposes no requirement upon the Secretary of State to establish procedures for ensuring that personal data which are exempt from the provisions of the Act by virtue of section 27 are relevant and not excessive for the purpose for which they are collected. Nevertheless, as I explained in reply to a similar question from the hon. Member for Wrexham (Dr. Marek) on 5 July 1984, at column219, my hon. and learned Friend is satisfied that in the organisations for which he is responsible appropriate arrangements exist for ensuring the security and quality of personal data.