The third data protection principle is that personal data must be adequate, relevant and not excessive in relation to the purpose for which it is processed.
Version status: In force | Document consolidation status: Updated to reflect all known changes
Version date: 25 May 2018 - onwards