There are many different issues associated with inherent in managing data, and the risk are the following ;
1.) Unfair obtaing/ discloursre 7.) Obstele records
2.) Acident/ negelgent dislourse 8.) Failure to process fairly and in accordance with
3.) Accient loss subject rights.
4.) Inaccracy
5.) Incomplete records
6.) Excessive

Tactics for reducing or avoiding risks:

Some specific tactics set down by law. The 8 Data Protection Principles, various industry Codes of Practice and guidance and interpretation published by the Information Commissioner.

Here are some groupings of tactics to flesh out the Principles:

Physical security – CCTV, secure business premises, adequate locked filing arrangements, secure waste or confidential waste bins, careful siting of computer terminals so they cannot be seen from the street or car park, swipe card entry to buildings or departments.

Procedural security – visitor sign in procedures, clean desk policy, "last out locks files" policy, laptop and home working security guidelines, hot-desking guidelines, password security policy, verifying identity before disclosing information, archive policy and procedures including deletion and destruction of information. In the HR environment checking that employees want references on leaving the company, keeping personnel files to a "model" standard.

Remember that specific procedures cover specific risks. It is impossible to cover every eventuality and to make sure that every employee, every temp or contractor has read and remembered the procedures. A compliant culture with individual employees aware of the risks and accepting accountability is the only way to cover all risks.

References:
Weber, M. (2008, May) Data Protection Consulting: Managing the risks inherent in handling personal data Retrieved November 17, 2010