- Data protection act
- Processed fairly and lawfully
- Obtained for specified and lawful purposes.
- Adequate, relevant and not excessive.
- Accurate and up to date.
- Processed in accordance with the “data subject’s” (the individual’s) rights.
- Not kept any longer than necessary.
- Securely kept
- Not transferred to any other country without adequate protection in situ.