n addition to requiring controllers comply with the data protection principles outlined above, the GDPR imposes further specific obligations. See page for all obligations