Principles of the Data Protection Act
The Data Protection Act is built on eight Principles:
Data to be fairly and lawfully processed;
Data to be processed for limited purposes;
Data to be adequate, relevant and not excessive;
Data to be accurate;
Data not to be kept longer than necessary;
Data to be processed in accordance with the data subject's rights;
Data to be secure;
Data not to be transferred to countries without adequate protection