||Personal data shall be processed fairly and lawfully.
||Personal data shall be obtained only for one or more specified
and lawful purposes.
||Personal data shall be adequate, relevant and not excessive
in relation to the purpose or purposes for which they are processed.
||Personal data shall be accurate and, where necessary, kept
up to date.
||Personal data processed for any purpose shall not be kept
for longer than is necessary for that purpose.
||Personal data shall be processed in accordance with the
rights of data subjects under the Act.
||Appropriate technical and organisational measures shall
be taken against unauthorised or unlawful processing of personal
data and against accidental loss or destruction of or damage
to personal data.
||Personal data shall not be transferred to a country or territory
outside the European Economic Area…