(1)This Chapter sets out the six data protection principles as follows—
(a)section 86 sets out the first data protection principle (requirement that processing be lawful, fair and transparent);
(b)section 87 sets out the second data protection principle (requirement that the purposes of processing be specified, explicit and legitimate);
(c)section 88 sets out the third data protection principle (requirement that personal data be adequate, relevant and not excessive);
(d)section 89 sets out the fourth data protection principle (requirement that personal data be accurate and kept up to date);
(e)section 90 sets out the fifth data protection principle (requirement that personal data be kept for no longer than is necessary);
(f)section 91 sets out the sixth data protection principle (requirement that personal data be processed in a secure manner).
(2)Each of sections 86, 87 and 91 makes provision to supplement the principle to which it relates.