Are you collecting personal data for marketing, research or fundraising purposes? The ICO website has loads of advice and resources to help you ensure that your museum meets its responsibilities to look after the information you hold properly.
If you hold and process information about your users, employees or suppliers, you are legally obliged to protect that information. Under the Data Protection Act, you must:
- only collect information that you need for a specific purpose;
- keep it secure;
- ensure it is relevant and up to date;
- only hold as much as you need, and only for as long as you need it; and
- allow the subject of the information to see it on request.
The ICO's tools and resources will help you to fulfil your obligations.