what are the 8 rules of data protection act?
Personal data must be obtained and processed for specified lawful purposes. The data obtained and processed should only be used in relation to the initial specified purpose clearly outlined. Never collect any information in which you do not require nor use that information for a purpose beyond the stated intention.