Legal requirements of the Data Protection Act

When we process your personal information, it must be:

1. Processed fairly and lawfully and, in particular, not be processed unless certain conditions are met, the most common of which is consent
   
   
2. Obtained only for one or more specified and lawful purposes, and not further processed in any manner incompatible with that purpose or those purposes
   
   
3. Adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed
   
   
4. Accurate and, where necessary, kept up to date
   
   
5. Kept for no longer than is necessary for the purpose or purposes for which they were collected
   
   
6. Processed in accordance with Your rights under the Data Protection Act.
   
   
7. Protected by appropriate technical and organisational measures against unauthorised or unlawful processing and accidental loss, destruction or damage
   
   
8. Transferred to a country or territory outside the European Economic Area only if that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal information, or if you consent

Call us on 0845 1 200 100*

your society | media centre | intermediaries & agencies | security & privacy | legal | accessibility | site map