86 The first data protection principle
86 The first data protection principle

(1)     The first data protection principle is that the processing of personal data must be—

(a)     lawful, and

(b)     fair and transparent.

(2)     The processing of personal data is lawful only if and to the extent that—

(a)     at least one of the conditions in Schedule 9 is met, and

(b)     in the case of sensitive processing, at least one of the conditions in Schedule 10 is also met.

(3)     The Secretary of State may by regulations amend Schedule 10—

(a)     by adding conditions;

(b)     by omitting conditions added by regulations under paragraph (a).

(4)     Regulations under subsection (3) are subject to the affirmative

Popular documents