The Law of Data Protection
The Data Protection Act contains eight Data Protection Principles. These state that all data must be:
Processed fairly and lawfully;
Obtained & used only for specified and lawful purposes;
Adequate, relevant and not excessive;
Accurate, and where necessary, kept up to date;
Kept for no longer than necessary;
Processed in accordance with the individuals rights (as defined);
Kept secure;
Transferred only to countries that offer adequate data protection.
Free Legal information and Legal advice