Data Protection Act 1998 (c. 29)

SCHEDULES

SCHEDULE 1 U.K. The data protection principles

Part I U.K. The principles

3 U.K. Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.