The first data protection principle: Processing of personal data for any of the law enforcement purposes must be lawful and fair
The second data protection principle: The law enforcement purpose for which personal data is collected must be specified, explicit and legitimate, and personal data must not be processed in a manner incompatible with that purpose
The third data protection principle: Personal data processed for any of the law enforcement purposes must be adequate, relevant and not excessive in relation to the purpose
The fourth data protection principle: Personal data must be accurate and, where necessary, kept up to date, and every reasonable step must be taken to ensure inaccurate data is erased or rectified without delay
The fifth data protection principle: Personal data must be kept for no longer than necessary for the purpose
The sixth data protection principle: Personal data must be processed in a manner that ensures appropriate security, using appropriate technical or organisational measures