Skip navigation

Data Compliance

What is The Data Protection Act?

The Data Protection Act (DPA) 2018 is a legislation brought in by the government to control how personal information is used, it is the UK’s implementation of the General Data Protection Regulations (GDPR).

The purpose of the DPA is to regulate the processing of personal data, ensuring individuals’ data is used fairly, lawfully, and transparently. It is also to protect individuals’ rights, giving people control over their personal information and how it’s used.

Key Principles:

  • Lawfulness, fairness, and transparency: Data must be processed lawfully, fairly, and in a transparent manner.
  • Purpose limitation: Data should be collected for specified, explicit, and legitimate purposes.
  • Data minimisation: Data should be adequate, relevant, and limited to what is necessary.
  • Accuracy: Data must be accurate and kept up to date.
  • Storage limitation: Data should not be kept for longer than necessary.
  • Integrity and confidentiality: Data must be processed securely.
  • Accountability: Organisations must take responsibility for complying with the DPA and demonstrate their compliance.

Our Objective

As a trusted and established records management company, information security, compliance, integrity and trust are central to what we do. It is crucial to us that both we and our suppliers operate responsibly and ethically, adhering to all external and internal policies, procedures, and standards to protect the information we hold for our clients as well as how we support them with the correct and up to date information and processes.

Archive-Vault is proud to be accredited to the ISO 9001:2015 and ISO/IEC 27001:2022 certifications by a UKAS governing body, and are registered with the Information Commissioner’s Office (ICO).

Benefits of Compliance

As a business, it is your responsibility to ensure any personal data you collect and use is kept secure, accurate and up to date. The ability to find the right information when necessary and keeping it safe will instil trust and, equally, save you a lot of time. Data compliance is mandatory, with heavy fines in place for businesses that are not compliant with the regulations.

At Archive-Vault, we recommend that businesses review their document management processes, including how data is stored and when and where it is destroyed. Working with an accredited records management partner can ensure documents are stored in compliance with GDPR and when you are no longer legally obliged to keep your records, they will be destroyed in accordance with EN15713 (European Standard for Information Destruction). 

If you have any questions regarding the safeguarding of your data, please get in touch with one of our team members today at info@archive-vault.co.uk.

Let’s talk about your records

Send your enquiry using our quick quote form, and a member of our team will aim to get back to you within 24 hours.


    What services are you interested in?


    Your details