• keep them only in one or more specified and legal purposes • use information for the purposes for which their were collected • keep them safe and secure
• keep them accurate, complete and up-to-date
• not stored them longer than is necessary
Every person may obtain a copy of their entire personal data by written request to any organization or individual who holds personal information, unless the Government instructs the Data Controller to withhold the information, data subject also has a right to correct any inaccurate information or, in some cases, such information can be completely removed. The Code of Practice does not apply to providers of publicly available electronic communications networks or services. Providers of publicly available electronic communications networks or services are required to have a security policy, ensure that personal data can only be used by authorised personnel for specified purposes and protect personal data against unlawful use or access.