<Li> Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data . </Li> <Li> Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data . </Li> <Dl> <Dt> Conditions relevant to the first principle </Dt> </Dl> <Dt> Conditions relevant to the first principle </Dt>

What is the main authority of data protection law in the uk