e protected against unauthorised or accidental access, processing, erasure or other use; take all reasonably practicable steps to ensure that a person can be informed of the kinds of personal data that the Department holds and the purposes for which the data are to be used; and permit persons to access and correct personal data of which they are the data subjects and process any such access/correc