# Data Protection Act 2018, Section 88: The third data protection principle


The third data protection principle is that personal data must be adequate, relevant and not excessive in relation to the purpose for which it is processed.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/section/88 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/section-88
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.