Data Protection Act 1998 (c. 29)

SCHEDULES

SCHEDULE 1 The data protection principles

Part I The principles

2 Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.