Section 85Overview

(1) This Chapter sets out the six data protection principles as follows—

(a)
section 86 sets out the first data protection principle (requirement that processing be lawful, fair and transparent);
(b)
section 87 sets out the second data protection principle (requirement that the purposes of processing be specified, explicit and legitimate);
(c)
section 88 sets out the third data protection principle (requirement that personal data be adequate, relevant and not excessive);
(d)
section 89 sets out the fourth data protection principle (requirement that personal data be accurate and kept up to date);
(e)
section 90 sets out the fifth data protection principle (requirement that personal data be kept for no longer than is necessary);
(f)
section 91 sets out the sixth data protection principle (requirement that personal data be processed in a secure manner).

(2) Each of sections 86, 87 and 91 makes provision to supplement the principle to which it relates.

Annotations

Commencement Information

I1 S. 85 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

https://dpa2018.digiphile.law/article/article-85.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.