If personal information is processed for the purpose of direct marketing (by means of unsolicited electronic communications, directories and automated decision making), organisations will have to comply with these 8 principles as well as section 69 of the act in order for the processing to be lawful