which of these is NOT a principle of the Data Protection Act 1998?
a. data must be kept secure
b. data must be shredded or destroyed by company when no longer needed
c. data should be accurate and up to date
d. data should be processed fairly and lawfully