The Data Protection Act 1998

1. You cannot do anything unlawful with the data
2. You must have legitimate evidence for collecting and using the data
3. You must give individuals a notice when you collect their personal data

1. You must be clear about why your collecting personal data & what you intend to do with it

1. You cannot hold more information than you need for a certain purpose

1. You must ensure the accuracy of any personal data you obtain
2. You must ensure that the source of any personal data is clear
3. You must consider whether it in necessary to update the information

Annotations:

• The continued possession, use, or control of something.

1. You must delete information that is no longer needed
2. You must update information if it goes out of date
3. Depending on the purpose, you must decide whether to keep the information

1. You must allow an individual a copy of their personal data that you are keeping
2. You must allow an individual compensation for the damages if the Act is breached

1. You must have suitable security that prevents the personal data from being compromised

1. You must not allow the data to be transferred outside the European Economic Area without adequate protection