Data Protection is for protection people.
information must be kept out of the wrong hands.

Security:
keeping information in the right hands, both within your company and outside


you must not deliberately access data you are not supposed to, or help someone else to access.
you must not gossip about customers, inside or outside the company

you must think that the details you record are correct and in free text never make personal remarks or inappropriate comments