# Data Protection Act 2018, Section 40: The sixth data protection principle


The sixth data protection principle is that personal data processed for any of the law enforcement purposes must be so processed in a manner that ensures appropriate security of the personal data, using appropriate technical or organisational measures (and, in this principle, “appropriate security” includes protection against unauthorised or unlawful processing and against accidental loss, destruction or damage).

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/section/40 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/section-40
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.