Data Protection Act

Data protection principles

Anyone processing personal data must comply with data protection principles set out in the Data Protection Act. Briefly, they say that the data must be:

  • fairly and lawfully processed
  • obtained only for one or more specified and lawful purposes
  • adequate, relevant and not excessive
  • accurate
  • not kept longer than necessary
  • accountable and responsible for compliance with the General Data Protection Regulation

The Data Protection Act gives you the right to apply for a copy of specific information held about you. You can, if you wish, appoint someone to apply for you such as a solicitor, or member of your family.