The Data Protection Directive requires anyone who handles personal information to comply with a number of important principles. Among them: ensure that the personal information is lawfully processed, accurate and up to date, processed in line with the individual’s rights, secure and not transferred to other countries without adequate protection.