Data Protection Act - Principles of Good Practice

We must make sure that your personal information is:
Processed fairly and lawfully and only processed if certain conditions are met.
Obtained only for one or more specified and lawful purpose(s), and not further processed.
Adequate, relevant and not excessive in relation to the purpose or purpose(s) for which it was collected.
Accurate and, where necessary, kept up to date.
Kept for no longer than is necessary for the purpose(s) for which it was collected.
Processed in accordance with your Rights under the Data Protection Act.
Protected by appropriate technical and organisational measures against unauthorised or unlawful processing or accidental loss, destruction or damage.
Not transferred to a country or territory outside the European Economic Area there is an adequate level of protection, with your consents or where permitted by the Data Protection Act.