Designing queries and establishing a data dictionary are important. Decisions should be informed by the Data Protection Act. Entities, attributes and relationships should be clearly defined.
On the 25th May 2018, the European Union鈥檚 General Data Protection Regulation (2016) legislation came into force. Since the UK left the European Union, a version of these rules called UK GDPR is in place as UK law. The implications for individuals and business of the UK GDPR legislation means that the data they hold must be:
processed lawfully, fairly and in a transparent manner in relation to individuals
used for the declared purpose only
limited to the data needed for the declared purpose