# Data Protection Act 2018, Section 37: The third data protection principle


The third data protection principle is that personal data processed for any of the law enforcement purposes must be adequate, relevant and not excessive in relation to the purpose for which it is processed.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/section/37 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/section-37
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.