The Eight Data Protection Principles
These principles provide a useful shorthand to the Data Protection Act's scope. The data should be:
- Processed fairly and lawfully.
- Processed for limited specified, lawful purposes.
- Adequate, relevant and not excessive.
- Accurate and kept up to date.
- Not kept for longer than is necessary.
- Processed in line with the individual’s rights.
- Secure from unauthorised or unlawful access and accidental loss.
- Not transferred outside the EU to areas without adequate regulation.