The 8 Principles of the Data Protection Act (DPA)

The 8 Principles of the Data Protection Act (DPA)

1. Personal data must be fairly and lawfully processed

2. Personal data must be processed for limited purposes

3. Personal data must be adequate, relevant and not excessive

4. Personal data must be accurate and up to date

5. Personal data must be not kept for longer than is necessary

6. Personal data must be processed in line with your rights

7. Personal data must be kept secure

8. Personal data must not be transferred to other countries outside of the European Economic Area that do not have adequate data protection