CONFIDENTIAL *機密
2 -
The second principle
Personal data shall be held only for
one or more specified and lawful purposes.
C
The third principle Personal data held for any purpose or purposes shall not be used or disclosed in any manner in- compatible with that purpose or those purposes.
The fourth principle
ww
· rersonal data held for any purpose or purposes shall be adequate, relevant and not excessive in relation to that purpose or those purposes.
The fifth principle Personal data shall be accurate and, where necessary, kept up to date.
The sixth principle - Personal data held for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
The seventh principle An individual shall be entitled
(a) at reasonable intervals and without undue delay or
(b)
expense
-
(i) to be informed whether personal data is held of which that individual is the subject; and
(ii) to access to any personal data held; and
where appropriate, to have personal data corrected or erased.
The eighth principle - Appropriate security measures shall be taken against unauthorised access to, or alteration, disclosure or destruction of, personal data and against accidental loss or destruction of personal data.
Note: Regard shall be had
(a) to the nature of the personal data and the harm that would
result from such access, alteration, disclosure, loss or destruction as are mentioned in this principle; and
(b)
3.
to the place where the personal data is stored, to security measures programmed into the relevant equipment and to measures taken for ensuring the reliability of staff having
access.
The seventh principle, which covers the disclosure of personal data to a data subject, has far-reaching implications and is currently under active discussion by the Working Party. Therefore departments are not expected to observe this principle at this point in time. However, it is advisable to bear this principle in mind at the design stage of new and relevant computer applications.
/....
CONFIDENTIAL
機密