What is the act which states that data should not be held for longer than necessary?

Asked by: Myron Terry  |  Last update: April 16, 2026
Score: 4.6/5 (64 votes)

The principle that data should not be held longer than necessary is a core component of data protection laws like the GDPR (General Data Protection Regulation) in Europe and the UK's Data Protection Act 2018, which mandates "storage limitation," meaning data should be kept for a period no longer than is necessary for the purpose it was collected for. In the U.S., similar concepts are found in state laws like the California Privacy Rights Act (CPRA), requiring data disposal once no longer needed.

What is the Data Protection Act 45?

Section 45(1) of the DPA 2018 gives people a right to obtain their personal information that is being used for a law enforcement purpose. This right allows people to request a copy of their personal information from you, as well as other supplementary information.

What is the Data Privacy Act of 2012?

It (1) protects the privacy of individuals while ensuring free flow of information to promote innovation and growth; (2) regulates the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of personal data; and (3) ensures ...

What is the Privacy Act of 1976?

The Privacy Act grants individuals increased rights of access to records maintained about them as well as the right to seek amendment of records maintained about them. The Treasury processes requests for records under both the Privacy Act and the Freedom of Information Act (FOIA).

What is the Data Protection Act 1998?

The Data Protection Act 1998 (DPA) implements the provisions of the EU Data Protection Directive (95/46/EC) and aims to “protect individuals with regard to the processing of personal data and on the free movement of such data”.

The Data Protection Act and the General Data Protection Regulation (GDPR)

35 related questions found

What is the difference between the Data Protection Act of 2018 and 1998?

The key changes between the Data Protection Act of 2018 and 1998 are: The identification of a right to erasure stemming from the right to privacy of individuals. Introduction of greater exemptions within this law. This is an implementation of the GDPR in the UK.

What is the Data Protection Act 2018?

Abbreviated to the DPA, the Data Protection Act (2018) is an Act of Parliament in the UK that is designed to ensure that personal data is collected, stored, and handled appropriately and responsibly to protect people's privacy.

What is the Privacy Act of 1977?

Information Practices Act of 1977 - California Civil Code §§ 1798-1798.78. This law applies to state government. It expands upon the constitutional guarantee of privacy by providing limits on the collection, management and dissemination of personal information by state agencies.

What does the Privacy Act 1988 do?

The Privacy Act 1988 (Privacy Act) is the principal piece of Australian legislation protecting the handling of personal information about individuals. This includes the collection, use, storage and disclosure of personal information in the federal public sector and in the private sector.

What is the Privacy Act of 1993?

Introduced in House (10/26/1993) Driver's Privacy Protection Act of 1993 - Amends the Federal criminal code to prohibit disclosure of personal information derived from an individual's motor vehicle records to anyone other than that individual.

What is Republic Act 10173 about?

The law aims to protect the security of personal data while promoting transparency and trust in digital systems, safeguarding privacy without compromising the free flow of information for innovation and growth.

Who enforces the Data Protection Act 2018?

The ICO upholds information rights in the public interest. In the context of data sharing, our focus is to help you carry out data sharing in a compliant way. We have various powers to take action for a breach of the GDPR or DPA 2018.

What information is protected by the Privacy Act?

The Privacy Act of 1974, as amended to present, including Statutory Notes (5 U.S.C. 552a), Protects records about individuals retrieved by personal identifiers such as a name, social security number, or other identifying number or symbol.

What are three rights that the Data Protection Act 2018 gives you?

the right to be informed about how and why their data is used - and you must give them privacy information; the rights to have their data rectified, erased or restricted; the right to object; the right to portability of their data; and.

What is the Data Protection Act 13?

13Compensation for failure to comply with certain requirements. (1)An individual who suffers damage by reason of any contravention by a data controller of any of the requirements of this Act is entitled to compensation from the data controller for that damage.

What is Section 42 of the Data Protection Act?

Section 42 (2) of the Data Protection Act imposes an obligation on data controllers in relation to selection of their data processors. In particular, a data controller can only opt for a data processor who provides sufficient guarantees and safeguards for data protection.

What is the Privacy Act of 1986?

Electronic Communications Privacy Act of 1986 - Title I: Interception of Communications and Related Matters - Amends the Federal criminal code to extend the prohibition against the unauthorized interception of communications to include specific types of electronic communications.

What is the S 6 1 of the Privacy Act?

'Privacy Act' is the Privacy Act 1988 (Cth). 'Personal information' is defined in s 6(1) of the Privacy Act, as information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.

What are the three rights under the Privacy Act?

The three primary rights under the U.S. Privacy Act of 1974 are the right to access your federal agency records, the right to amend inaccurate or incomplete records, and the right to seek legal action if the government violates your privacy rights, with broader principles also protecting against unwarranted disclosures and mandating agency accountability. 

What is Section 7 of the Privacy Act?

Privacy Act of 1974

Sec. 7. [5 U.S.C. 552a note] (a)(1) It shall be unlawful for any Federal, State or local government agency to deny to any individual any right, benefit, or privilege provided by law because of such individual's refusal to disclose his social security account number.

What's the difference between the Civil Rights Act of 1964 and 1965?

The Civil Rights Act of 1964 outlawed discrimination in public places and employment, tackling segregation broadly, while the Voting Rights Act of 1965 specifically targeted voter suppression, banning discriminatory practices like literacy tests and giving the federal government power to enforce voting rights, which the 1964 Act didn't fully address. The 1964 Act ended Jim Crow segregation in public spaces and jobs, but Black citizens still couldn't easily vote, leading to the 1965 Act's focus on enfranchisement after events like the Selma marches. 

What is the Privacy Act 93 579?

The Privacy Act of 1974, Public Law 93-579, was created in response to concerns about how the creation and use of computerized databases might impact individuals' privacy rights. It safeguards privacy through creating four procedural and substantive rights in personal data.

What is Section 173 of the Data Protection Act?

Section 173 of the Data Protection Act 2018 makes it a criminal offence, when a request has been made in exercise of a data subject access right, for a person (listed below) to alter, deface, block, erase, destroy or conceal information with the intention of preventing disclosure of all or part of the information that ...

What is the personal data Protection Act 2010?

An Act to regulate the processing of personal data in commercial transactions and to provide for matters connected therewith and incidental thereto.

What is the Data Protection Act in the USA?

Contents. The American Data Privacy and Protection Act (ADPPA) aimed to regulate how organizations keep and use consumer data. The Act had several main principles: data minimization, individual ownership, and private right of action.