HL Deb 24 July 2001 vol 626 cc195-6WA
The Earl of Northesk

asked Her Majesty's Government:

What the legal position is in respect of data matching across government departments. [HL423]

The Lord Chancellor

As with any other activity, departments must act within their legal powers and not contravene any other relevant common or statute law, such as the common law duty of confidence and the Human Rights Act.

Once a freestanding lawful basis has been established, departments must then ensure that their data matching is carried out in compliance with the eight data protection principles laid down in the Data Protection Act 1998 (or in reliance upon one of the Act's limited exemptions). Among other things, the principles require personal data to be processed fairly and lawfully and for limited purposes; to be accurate; not kept for longer than necessary; and held securely.