Data protection principles

1. Personal data must be processed fairly and lawfully; and usually only with the data subject's consent

2. Data should only be processed for specified and lawful purposes

3. Data must not be excessive to the purposes for which it is processed

4. Data must be accurate and kept up to date

5. Data must not be kept longer than the purpose requires

6. The data subject's rights must be protected

7. Data must be safeguarded against misuse or accidental loss

8. Data must not be transferred outside the European Economic Area without the assurance of adequate protections