Personal data undergoing automatic processing shall be:
- a.obtained and processed fairly and lawfully;
- b.stored for specified and legitimate purposes and not used in a way incompatible with those purposes;
- c.adequate, relevant and not excessive in relation to the purposes for which they are stored;
- d.accurate and, where necessary, kept up to date;
- e.preserved in a form which permits identification of the data subjects for no longer than is required for the purpose for which those data are stored.