Data Protection Act

Data protection principles

Anyone processing personal data must comply with the eight data protection principles set out in the Data Protection Act 1998.  Briefly, they say that the data must be:

  • fairly and lawfully processed
  • obtained only for one or more specified and lawful purposes
  • adequate, relevant and not excessive
  • accurate
  • not kept longer than necessary
  • processed in accordance with data subject's rights
  • adequately secure
  • not transferred to countries without adequate protection
The Data Protection Act 1998 gives you the right to apply for a copy of specific information held about you.  You can, if you wish, appoint someone to apply for you such as a solicitor, or member of your family.