Appendix 6: Sample data protection statements


Under the terms of the Data Protection Act, the museum is obliged to supply the following information at all instances where it requests personal data. This includes personal data collected in hard-copy format (i.e. paper form), or electronically (i.e. via e-mail or the website).

1. The name of the Data Controller, i.e. the XXXX museum.

2. The purpose for which the personal data are being collected (e.g. administering a booking, answering an enquiry etc.).

3. Clear contact details for the museum (somewhere on the form, if not necessarily part of the statement itself).

4. Details about any further ways in which the museum would like to use the personal data (in particular, marketing ...

Get Records Management for Museums and Galleries now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.