|
There are eight Data
Protection Principles (“The Principles”) in the Act, sometimes referred
to as the Principles of “good information handling” which Data
Controllers (the Council) are required to comply with these are that: |
| Personal data: |
| 1. |
Shall be processed fairly and lawfully |
| 2. |
Shall be obtained only for one or more
specified and lawful purposes, and shall not be further processed in any
manner incompatible with that purpose(s) |
| 3. |
Shall be adequate, relevant and not
excessive in relation to the purpose or purposes for which they are
processed”. |
| 4. |
Shall be accurate and, where necessary,
kept up to date. |
| 5. |
Processed for any purpose or purposes
shall not be kept for longer than is necessary for that purpose or those
purposes. |
| 6. |
Personal data shall be processed in
accordance with the rights of data subjects under this Act. |
| 7. |
Appropriate technical and organisational
measures shall be taken against unauthorised or unlawful processing of
personal data and against accidental loss or destruction of, or damage
to, personal data. |
| 8. |
Personal data shall not be transferred to
a country or territory outside the European Economic Area, unless that
country or territory ensures an adequate level of protection of the
rights and freedoms of data subjects in relation to the processing of
personal data. |
| |
| Other web sites providing
further information: |
|
The Information Commissioners Office Web Site |
|
View The
Data Protection Act In Full |