Which of the following is NOT among the Data Protection Principles?

• A. Fairly and lawfully processed.
• B. Not kept for longer than necessary.
• C. Access.
• D. Secure.

Answer: (C)

This question tests the difference between data protection principles and data subject rights. The principles lay out the mandatory standards for how personal data should be processed: it must be processed fairly and lawfully; data should not be kept longer than necessary (storage limitation); and processing must be secure (integrity and confidentiality). Access, on the other hand, is a data subject right that allows individuals to obtain copies of their data and information about how it’s processed. It’s not a principle, but a right granted to individuals. So, Access is not among the Data Protection Principles.