Under the Data Protection Act, how many principles exist?

• A. 5
• B. 8
• C. 9
• D. 7

Answer: (B)

Data protection is built on a set of eight principles that govern how personal information should be handled. These principles require that data be processed fairly and lawfully for specified purposes; be adequate, relevant and not excessive for those purposes; be accurate and kept up to date; not be kept longer than necessary; be processed in accordance with individuals’ rights; be kept secure against unauthorised access, loss or damage; and, if transferred outside the UK/EEA, be subject to adequate protection in the receiving country. In a dental setting, this means patient records must be treated with care: used only for treatment and related admin, kept accurate, stored securely, retained only as long as needed, and shared only when proper safeguards and consent exist.