(1) Personal data shall only be processed in compliance with procedures and principles laid down in this Law or other laws.

(2) The following principles shall be complied within the processing of personal data:

• a) Lawfulness and fairness
• b) Being accurate and kept up to date where necessary.
• c) Being processed for specified, explicit and legitimate purposes.
• ç) Being relevant, limited and proportionate to the purposes for which they are processed.
• d) Being stored for the period laid down by relevant legislation or the period required for the purpose for which the personal data are processed.