Which of the following principles is usually recommended for inclusion in legislation on data protection?
A.
The data user should provide the data subject with regular and detailed information on the data held
B.
All personal data held by data users should be updated by checking this data with the subject at regular intervals
C.
All personal data held by data users should be adequate for the purposes of the data user but not excessive
D.
All personal data held by data users should be reviewed regularly and automatically deleted after a specified period of time