Good practice around data security and safety is essential to protect online privacy, to minimise risks to data security, and to comply with the law. The Data Protection Act (1988) provides a legal obligation to protect any personal information collected on, for example, students and staff. This ensures that only essential information is collected, that it is secure and held only as long as is necessary.