Data Protection Act 2018 (c. 12)

PART 3 Law enforcement processing

CHAPTER 2 Principles

37 The third data protection principle

The third data protection principle is that personal data processed for any of the law enforcement purposes must be adequate, relevant and not excessive in relation to the purpose for which it is processed.