The seven data protection principles
GDPR outlines seven key data protection principles (Art. 5) that must be adhered to regarding personal data collection and processing. Data controllers, above all, must follow these seven guiding principles: Processed lawfully, fairly and in a transparent manner; Collected and processed only for specified, explicit and legitimate purposes; Adequate, relevant and limited to only what is necessary (also referred to as ‘data minimisation’); Accurate and up-to-date; Kept in a way that allows identification of data subjects for no longer than necessary for processing; Processed in a manner that ensures appropriate security; Stored for no longer than necessary.