Sections 1 and 2 of Part I, Sections 4, 5(b), (c), (e), (g), (h), (i) and (j) and 6 of Part II Proclaimed by [Proclamation No. 5 of 2009] w.e.f 16th February 2009. SECTIONS 3, 5(a), (d) AND (f), 7 TO 16 AND 18 TO 66 OF THE DATA PROTECTION ACT Passed by the National Assembly on the first day of June two thousand and four. André Pompon Clerk of the National Assembly FIRST SCHEDULE (section 2, 15 and 31) DATA PROTECTION PRINCIPLES First principle Personal data shall be processed fairly and lawfully. Second principle Personal data shall be obtained only for any specified and lawful purpose, and shall not be further processed in any manner incompatible with that purpose. Third principle Personal data shall be adequate, relevant and not excessive in relation to the purpose for which they are processed. Fourth principle Personal data shall be accurate and, where necessary, kept up to date.