1st: |
Personal data shall be processed fairly and lawfully. |
2nd: |
Personal data shall be obtained only for one or more specified
and lawful purposes. |
3rd: |
Personal data shall be adequate, relevant and not excessive
in relation to the purpose or purposes for which they are processed. |
4th: |
Personal data shall be accurate and, where necessary, kept
up to date. |
5th: |
Personal data processed for any purpose shall not be kept
for longer than is necessary for that purpose. |
6th: |
Personal data shall be processed in accordance with the
rights of data subjects under the Act. |
7th: |
Appropriate technical and organisational measures shall
be taken against unauthorised or unlawful processing of personal
data and against accidental loss or destruction of or damage
to personal data. |
8th: |
Personal data shall not be transferred to a country or territory
outside the European Economic Area… |