Data Protection Act, 1988 37 of 50 https://www.irishstatutebook.ie/eli/1988/act/25/enacted/en/print.html?printonload=true 6. The declarations provided for in paragraph 2 above shall take effect from the moment of the entry into force of the convention with regard to the State which has made them if they have been made at the time of signature or deposit of its instrument of ratification, acceptance, approval or accession, or three months after their receipt by the Secretary General of the Council of Europe if they have been made at any later time. These declarations may be withdrawn, in whole or in part, by a notification addressed to the Secretary General of the Council of Europe. Such withdrawals shall take effect three months after the date of receipt of such notification. CHAPTER II—BASIC PRINCIPLES FOR DATA PROTECTION Article 4 Duties of the Parties 1. Each Party shall take the necessary measures in its domestic law to give effect to the basic principles for data protection set out in this chapter. 2. These measures shall be taken at the latest at the time of entry into force of this convention in respect of that Party. Article 5 Quality of data Personal data undergoing automatic processing shall be: a. obtained and processed fairly and lawfully; b. stored for specified and legitimate purposes and not used in a way incompatible with those purposes; c. adequate, relevant and not excessive in relation to the purposes for which they are stored; d. accurate and, where necessary, kept up to date; e. preserved in a form which permits identification of the data subjects for no longer than is required for the purpose for which those data are stored. Article 6 21.02.23, 18:36