The principles of data protection

Personal data must be:

• Processed fairly, lawfully and transparently
• Processed for specific, explicit and legitimate purposes
• Adequate, relevant and limited to that which is necessary, and no more
• Accurate and up to date, and erased or rectified where shown to be inaccurate
• Not kept for longer than is necessary in a format that enables identification
• Processed securely to prevent unauthorised or unlawful access, and accidental loss destruction or damage

For more information visit data protection principles (opens new window).