"The 8 main Principles of data protection act are: 1: Personal data shell be processed fairly, lawfully and, in particular shall not be processed unless at least one of the conditions are met in Schedule 2 and also in the case of sensitive data at least one of the conditions set out in the following: Schedule 3 and Statutory 417/200 and 2905/2002.2: Personal data is obtained for one or more
. specified and lawful purpose and shall not be processed in any manner incompatible with the purpose or purposes.3: personal data she be adequate, relevant and not be of any relation to the purpose or purposes for which they are processed. 4: Personal data shall be accurate and kept up to date. 5: personal data processed for any purpose shall not be kept for longer then is necessary for the purpose or purposes. 6: personal data shall be processed in accordance with the rights of data subjects under this act.7: Appropriate technical and organizational measures shall be taken against unauthorized or unlawful processing of personal data, accidental loss or destruction or damage to personal data. 8: Personal data shall not be transferred to a country or territory outside the European Economic Area, unless thta counrty ensures and adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data."
