Principle 1
Personal data shall be processed fairly and lawfully.
Principle 2
Personal data shall be obtained for specifies and lawful purposes.
Principle 3
Personal data shall be adequate, relevant and not excessive.
Principle 4
Personal data shall be accurate and kept up to date.
Principle 5
Personal data shall be kept no longer than necessary.
Principle 6
Personal data shall be processed within the rights of the data subjects.
Principle 7
Measures shall be taken against unauthorised/unlawful processing of personal data.
Principle 8
Personal data shall not be transferred outside of the European economic area.