Appropriate policy document

Principle 3 - adequate, relevant and limited to what is necessary

Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed:

  • we will collect only the minimum personal data needed for the purpose for which it is collected
  • data collected will be adequate and relevant
  • we will use data protection impact assessments to ensure proposed processing is not excessive