As a user of RM Auditor, you need to understand your responsibilities regarding the auditing of information about other users, including students. You should refer to your Local Education Authority (LEA) for guidance on the implementation of the Data Protection Act in your establishment.
The Data Protection Act 1998 states that anyone collecting and processing personal data must comply with the eight enforceable principles of good practice.
These principles state that personal data must be:
Fairly and lawfully processed.
Processed for limited purposes.
Adequate, relevant and not excessive.
Accurate.
Not kept longer than necessary.
Processed in accordance with the data subject's rights.
Secure.
Not transferred to other countries without adequate protection.