Six data protection principles will require that personal data should be:
- processed in a fair, lawful and transparent manner
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
- adequate, relevant and limited to what is necessary
- accurate and where necessary kept up to date (inaccurate data should be erased or rectified without delay)
- kept in a form permitting identification for no longer than is necessary
- processed in a manner ensuring appropriate security of the personal data
