21. (1) (2) (3) (4) (5) The Principle of Purpose Limitation Personal data shall be obtained only for one or more explicit, specified and lawful purposes. Personal data shall not be further processed in any manner incompatible with that purpose or those purposes. For the purposes of the application of the principles stipulated in sub-Articles (1) and (2) of this Article, the purpose for which personal data are obtained shall be specified (a) in a notice given by the data controller to the data subject prior to that further processing; or (b) in a description given to the Commission under Article 44 sub-Article (3) lit. (e) of this Proclamation. In determining whether any disclosure of personal data is compatible with the purpose for which the data were obtained, regard is to be had to the: (a) purpose for which the personal data are intended to be processed by any person to whom they are disclosed; and (b) functions or activities of the person processing the personal data. For the purpose of sub-Article (4) of this Article, further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is, subject to appropriate safeguards, compatible with those purposes. 22. The Principle of Data Minimization Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed. 23. (1) (2) The Principle of Accuracy Personal data shall be accurate and, where necessary, kept up-to-date. The principle of accuracy is not to be regarded as being contravened by reason of any inaccuracy in personal data which accurately record information obtained by the data controller from the data subject or a third party in a case where: (a) having regard to the purpose for which the data were obtained and further processed, the data controller has taken reasonable steps to ensure the accuracy of the data; and (b) if the data subject has notified the data controller of the data subject’s view that the data is inaccurate and the data indicates that fact. 24. (1) The Principle of Storage Limitation Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. Sub-Article (1) of this Article does not apply to personal data if: (a) the retention of the record is required or authorized by this or other Proclamations; or (b) the retention of the record is reasonably necessary for a lawful purpose related to a function or activity. (2) 12