what are the eight principles of the data protection act?
2. Personal data shall be obtained only for one or more specified and lawful purposes and shall not be further processed in any manner incompatible with that purpose or purposes. 3. Personal data shall be adequate, relevant and not excessive in relation to the purposes or purposes for which they are processed.