Data Protection Act

• Accurate and kept up-to-date, old data should be destroyed.
• All personal information must be kept safe and secure.
• Kept for no longer than necessary.
• Processed fairly and lawfully- information should be collected only with consent and on a need to know basis.