principle 1

Personal data shall be processed fairly and lawfully

When we collect personal data from individuals, do we make them aware of how we will be using their data in the future?

If we make personal data available to third parties, do we make the individuals concerned aware of this?

Do we have consent for any secondary uses of personal data that would not be obvious e.g. direct marketing

Can our data collection processes be described as open, transparent and up-front?

If we are using or sharing personal data without consent, are we confident that the Data Protection Act allows this in the public interest?