data protection act

• data must be used fairly and lawfully
• data must not be kept longer than is necessary
• data must be kept securely e.g. password protected/ file cabinet
• data must not be excessive