SCHEDULES

SCHEDULE 1 The data protection principles

Part II Interpretation of the principles in Part I

The eighth principle

13

An adequate level of protection is one which is adequate in all the circumstances of the case, having regard in particular to—

a

the nature of the personal data,

b

the country or territory of origin of the information contained in the data,

c

the country or territory of final destination of that information,

d

the purposes for which and period during which the data are intended to be processed,

e

the law in force in the country or territory in question,

f

the international obligations of that country or territory,

g

any relevant codes of conduct or other rules which are enforceable in that country or territory (whether generally or by arrangement in particular cases), and

h

any security measures taken in respect of the data in that country or territory.