Data Protection

Data Protection gives individuals certain rights. It also says those who record and use personal information must be open about how the information is used and must follow the eight principles of 'good information handling'.


Anyone processing personal data must comply with the eight enforceable principles of good practice. They say that data must be: 

  • Processed fairly and lawfully
  • Processed for limited purposes
  • Adequate, relevant and not excessive
  • Accurate and up-to-date
  • Not kept longer than necessary
  • Processed in accordance with the data subject's rights
  • Secure
  • Not transferred to countries outside EEA without adequate protection
  • Applying for Personal Information

Please see Subject Access page

More in… Accessing Information

Also in… Data Protection

GMP on Twitter

GMP on Facebook