Data Protection Act, 1988 9 of 50 https://www.irishstatutebook.ie/eli/1988/act/25/enacted/en/print.html?printonload=true (c) the data— (i) shall be kept only for one or more specified and lawful purposes, (ii) shall not be used or disclosed in any manner incompatible with that purpose or those purposes, (iii) shall be adequate, relevant and not excessive in relation to that purpose or those purposes, and (iv) shall not be kept for longer than is necessary for that purpose or those purposes, (d) appropriate security measures shall be taken against unauthorised access to, or alteration, disclosure or destruction of, the data and against their accidental loss or destruction. (2) A data processor shall, as respects personal data processed by him, comply with paragraph (d) of subsection (1) of this section. (3) Paragraph (a) of the said subsection (1) does not apply to information intended for inclusion in data, or to data, kept for a purpose mentioned in section 5 (1) (a) of this Act, in any case in which the application of that paragraph to the data would be likely to prejudice any of the matters mentioned in the said section 5 (1) (a). (4) Paragraph (b) of the said subsection (1) does not apply to backup data. (5) (a) Paragraph (c) (iv) of the said subsection (1) does not apply to personal data kept for historical, statistical or research purposes, and (b) the data or, as the case may be, the information constituting such data shall not be regarded for the purposes of paragraph (a) of the said subsection as having been obtained unfairly by reason only that its use for any such purpose was not disclosed when it was obtained, if the data are not used in such a way that damage or distress is, or is likely to be, caused to any data subject. (6) (a) The Minister may, for the purpose of providing additional safeguards in relation to personal data as to racial origin, political opinions, religious or other beliefs, physical or mental health, sexual life or criminal convictions, by regulations amend subsection (1) of this section. (b) Regulations under this section may make different provision in relation to data of different descriptions. 21.02.23, 18:36