35 The first data protection principle
35 The first data protection principle

(1)     The first data protection principle is that the processing of personal data for any of the law enforcement purposes must be lawful and fair.

(2)     The processing of personal data for any of the law enforcement purposes is lawful only if and to the extent that it is based on law and either—

(a)     the data subject has given consent to the processing for that purpose, or

(b)     the processing is necessary for the performance of a task carried out for that purpose by a competent authority.