Codes of Practice/ Guidelines

Code of Practice on the Identity Card Number and other Personal Identifiers

2. Principle 2 - accuracy and duration of retention of personal data

All practicable steps shall be taken to ensure that-
1. personal data are accurate having regard to the purpose (including any directly related purpose) for which the personal data are or are to be used;
2. where there are reasonable grounds for believing that personal data are inaccurate having regard to the purpose (including any directly related purpose) for which the data are or are to be used-
  1. the data are not used for that purpose unless and until those grounds cease to be applicable to the data, whether by the rectification of the data or otherwise; or
  2. the data are erased;
3. where it is practicable in all the circumstances of the case to know that-
  1. personal data disclosed on or after the appointed day to a third party are materially inaccurate having regard to the purpose (including any directly related purpose) for which the data are or are to be used by the third party, and
  2. that data were inaccurate at the time of such disclosure, that the third party-
    (A) is informed that the data are inaccurate; and
    (B) is provided with such particulars as will enable the third party to rectify the data having regard to that purpose.
Personal data shall not be kept longer than is necessary for the fulfillment of the purpose (including any directly related purpose) for which the data are or are to be used.

3. Principle 3 - use of personal data

Personal data shall not, without the prescribed consent of the data subject, be used for any purpose other than-
1. the purpose for which the data were to be used at the time of the collection of the data; or
2. a purpose directly related to the purpose referred to in paragraph (a).