Principles of the Data Protection Act
The Data Protection Act is built on eight Principles:
- Data to be fairly and lawfully processed;
- Data to be processed for limited purposes;
- Data to be adequate, relevant and not excessive;
- Data to be accurate;
- Data not to be kept longer than necessary;
- Data to be processed in accordance with the data subject's rights;
- Data to be secure;
- Data not to be transferred to countries without adequate protection
