There are many things to consider in order to stay compliant. Some of the key points include:
Process information fairly – be certain that the individual knows you have their information and tell them what you plan to do with it.
Ensure that any information you collect has a purpose
Keep data up-to-date and accurate
Be transparent and let individuals know what data you hold. If they request to be removed – do it.
Keep information secure
Keep adequate data audits and record your processes and policies