As well as imposing certain specific obligations (see below), the GDPR requires controllers to process data in compliance with various data protection principles. See page for all principles