PART IThe Principles
Personal data held by data users
1The information to be contained in personal data shall be obtained, and personal data shall be processed, fairly and lawfully.
2Personal data shall be held only for one or more specified and lawful purposes.
3Personal data held for any purpose or purposes shall not be used or disclosed in any manner incompatible with that purpose or those purposes.
4Personal data held for any purpose or purposes shall be adequate, relevant and not excessive in relation to that purpose or those purposes.
5Personal data shall be accurate and, where necessary, kept up to date.
6Personal data held for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
7An individual shall be entitled—
(a)at reasonable intervals and without undue delay or expense—
(i)to be informed by any data user whether he holds personal data of which that individual is the subject; and
(ii)to access to any such data held by a data user ; and
(b)where appropriate, to have such data corrected or erased.
Personal data held by data users or in respect of which services are provided by persons carrying on computer bureaux
8Appropriate security measures shall be taken against unauthorised access to, or alteration, disclosure or destruction of, personal data and against accidental loss or destruction of personal data.