Data Protection Act : Data Protection Principles

The data protection principles are requirements that data controllers must meet to comply with the Data Protection Act. These eight principles state that any personal data stored by a data controller shall :

1.  be processed fairly and lawfully
2.  be processed only for limited purposes
3.  be adequate, relevant and not excessive in relation to the purpose for which they are held
4.  be accurate and up to date
5.  be held no longer than is necessary
6.  be processed in line with a data subject's rights
7.  be kept securely
8.  not be transferred to countries that don't have similar data protection laws to the UK.

GCSE ICT Companion 04 - (C) P Meakin 2004