General Data Protection Regulation Principles

Question 1

Purpose Limitation

Answer 1

Personal data should be collected for specific and legitimate purposes, which is clearly told to the data subject. The personal data cannot be used for any other purpose.

Question 2

Data Minimisation

Answer 2

Personal data should be adequate, relevant and limited to what is needed.

Question 3

Accuracy

Answer 3

Personal data must be accurate and kept up to date. Reasonable steps should be taken to rectify any data that is found to be innacurate.

Question 4

Storage Limitation

Answer 4

Personal data should not be kept for any longer than necessary for the purpose it was collected. When it is not needed it must be disposed of securely.