There are 6 core principles of the GDPR are: Fairness, Lawfulness and Transparency. You much be fair, honest, and transparent with individuals whose data you are processing. Purpose Limitation. You must be clear about your purpose(s) for processing personal data. Data Minimisation. You should only process the information that you need to make a decision. Accurate and relevant. keep personal data accurate and up to date. Storage Limitation. You should only keep the individual’s data for as long as is necessary. Integrity & Confidentiality. You must keep personal data safe and secure. Accountability. Whilst not a core principle, it does underpin the above principles.  You must be responsible and adhere to the rules of GDPR. (Under the original Data Protection Act (DPA) 1998, there were 8 principles. 6 of these were like the current GDPR principles above. Originally, they were fairness and lawfulness, purposes, adequacy, accuracy, retention, rights, and security).