Data Protection Principles

6 February 2008

By Ben Evans

The Data Protection Principles

The Data Protection Act 1998 is the governing legislation for data protection, it provides the following:

1. The data should be processed fairly and lawfully and may not be processed unless the data controller can satisfy one of the conditions for processing set out in the Act.
2. Data should be obtained only for specified and lawful purposes.
3. Data should be adequate, relevant and not excessive.
4. Data should not be accurate and, where neccessary, lept up to date.
5. Data should not be kept longer than is necessary for the purpose for which it is processed.
6. Data should be processed in accordance with the rights of the data subject under the Act.
7. Appropriate technical and organisational measures should be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
8. Data should not be transferred to a country or territory outside the EEA unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

Ben Evans is an Intellectual Property Executive at Lawdit.