The EU GDPR establishes 7 principles for the legal handling of personal data. In addition, handling comprises the gathering, organization, structuring, storage, modification, consultation, usage, transmission, mixture, limitation, erasure, or destruction of personal information.