Time Frame

• Personal information cannot be kept any longer than is necessary and may only be used for the reason it was collected.
  
  

Releasing Information

• Information cannot be released without authorization or in compliance with the law, nor can it be transmitted outside the "European Economic Area" without consent and protection.
  
  

Registration

• Under the Act, data controllers must register with the ICO if they process personal information.
  
  

Access

• Other than a few exceptions, People have the right to access what information others have about them.
  
  

Security

• Anyone holding personal data about individuals must use the proper security measures to protect the information.
  
  

Rights

• People have the right to correct inaccurate facts collected, but not opinions.