The Data Protection Act
Any information held by a company on its employees could be classed as information that the employer needs to satisfy themselves that they are fully complying with the Data Protection Act. An access control system is no different, as information regarding the access rights for employees to certain sections of an employer’s property will normally be held on a central database controlling the access control system. If such information is being held then the employer will be responsible to ensure that such information is stored and used correctly as required by the Act.

Root3 advises all companies to register their access control system and CCTV systems with the Information Commissioner's Office (ICO) as soon as they are installed.

The ICO has produced a good practice guide for employers and legal guidance for further information that can both be downloaded here:

	Employment Practices Code   Data Protection Legal Guidance

We recommend that companies further investigate this issue with the ICO at www.ico.gov.uk.