The GDPR law has its core in 7 principles which are1) Lawfulness, fairness, and transparency; 2) Purpose limitation; 3) Data minimisation; 4) Accuracy; 5) Storage limitations; 6) Integrity and confidentiality; and 7) Accountability