LAWS GOVERNING PROTECTION OF INFORMATION

The following rules must be observed in order to keep within the law when working with data and
information.

1. Data & information should be kept secure against loss or exposure.

2. Data & information should not be kept longer than necessary.

28

3. Data & information should be accurate and up-to-date.

4. Data & information should be collected, used & kept for specified lawful purposes (i.e., it should not
be

used for unlawful gain).

5. The owner of the data has a right to know what data is held by the person or organization having it.

6. Data should not be transferred to other countries without the owner’s permission.

7. Do not collect irrelevant and overly too much information for a purpose.