Data Protection Act - Crossword

Clues

1. Information that relates to an identified or identifiable individual, such as name, address, phone number, and medical history (12)
2. Permission given by individuals for companies to collect their personal data; must be freely given, specific, informed, and revocable (7)
3. A principle that data should be collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes (17)
4. A principle that ensures the collection of data is adequate, relevant, and limited to what is necessary for the purposes for which it is processed (16)
5. A principle requiring personal data to be accurate and kept up to date (8)
6. A principle that personal data should be kept in a form that permits identification of data subjects for no longer than necessary (17)
7. A principle that the data controller is responsible for, and must be able to demonstrate, compliance with the other data protection principles (14)