Principles of data processing Flashcards
To familiarise the student with the norms of processing personal data applicable in the UN
Do the principles of data processing apply only to personal data?
No, in addition to personal data, including sensitive personal data, non-personal data in a sensitive context will also be processed in accordance with these principles, insofar as they are applicable in the circumstances.
What does the principle of “fair and legitimate processing” require?
It requires that the processing of the personal data is with the consent of the data subject, or alternatively, one of the other legal bases in section 9.2 applies.
What does the principle of “purpose specification” require?
It requires that personal data be processed only for the purposes that are specified by the data steward under section 6.1(b) and that are permitted pursuant to one or more of the relevant legal bases for data processing under section 9.2.
What does the principle of “proportionality and necessity” require?
It requires that the processing of personal data shall be relevant, limited and adequate to what is necessary in relation to the purposes specified in accordance with section 9.3 above.
