Principle (f): Integrity and confidentiality (security)
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
You must ensure that you have appropriate security measures in place to protect the personal data you hold.
This is the ‘integrity and confidentiality’ principle of the GDPR – also known as the security principle.
For more information, see security.