Principles of Data Protection Act-1984:

1.      Personal data must be obtained and processed fairly and lawfully.

2.      Personal data must be held for specified purposes.

3.      Personal data must not be used for any reason incompatible with its original purpose.

4.      Personal data must be relevant and adequate.

5.      Personal data must be accurate and up-to-date.

6.      Personal data must not be kept longer than necessary.

7.      Personal data must be made available to the individual concerned and provision made for corrections.

8.      Personal data must be kept secure.