North West Fire & Security 
The Data Protection Act 1998 came into force on 1 March 2000. Under the Data Protection Act, anyone processing personal information must comply with eight principles of good information handling. The eight principles state that the data must be:
fairly and lawfully processed;
processed for limited purposes;
adequate, relevant and not excessive;
accurate and up to date;
not kept longer than necessary;
processed in accordance with the individual's rights;
secure;
not transferred to countries outside the European Economic area, unless there is adequate protection.
Usefull Documents: