juris

Section 26: Use of personal data

Data Protection Act · PART IV: OBLIGATION ON DATA CONTROLLERS

repealed (no longer in force). juris shows the text as it was consolidated; it does not confirm that this is the law in force today. The records juris holds show this law as repealed.

26. Use of personal data The data controller shall ensure that personal data is— (a) kept only for one or more specified and lawful purposes for which the data is collected and processed; (b) not used or disclosed in any manner incompatible with the purposes for which the data is collected and processed; (c) adequate, relevant and not excessive in relation to the purposes for which the data is collected and processed; and (d) not kept for longer than is necessary for the purposes for which the data is collected and processed. (S. 26 came into operation on 16 February 2009.)

Ask juris about this section Official source