Data protection - Word Drop

Organisations hold personal data about people, so they must follow data protection rules. In the UK these rules come from the ______ and the Data Protection Act 2018. Personal data must be processed ______, which means an organisation needs a valid reason to collect it. Data can be collected only for a specific ______, and it must not be used for anything else without consent.

Organisations must collect only the information that is ______ to provide the service. The data must be kept ______, which means it is corrected if it is wrong. It should not be stored for ______ than is necessary. Personal data must also be kept ______ by using appropriate security measures.

A ______ is the person the data is about. They have the right to ______ the personal data an organisation holds about them. They also have the right to be ______, which means their data must be deleted. Finally, personal data must not be ______ to countries that offer less protection than the UK.