Section 34(1)

This Chapter sets out the six data protection principles as follows— section 35(1) sets out the first data protection principle (requirement that processing be lawful and fair); section 36(1) sets out the second data protection principle (requirement that purposes of processing be specified, explicit and legitimate); section 37 sets out the third data protection principle (requirement that personal data be adequate, relevant and not excessive); section 38(1) sets out the fourth data protection principle (requirement that personal data be accurate and kept up to date); section 39(1) sets out the fifth data protection principle (requirement that personal data be kept for no longer than is necessary); section 40 sets out the sixth data protection principle (requirement that personal data be processed in a secure manner).

← 34 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04