principles of data protection Flashcards
What is the first principle of data protection?
Lawfulness, Fairness, and Transparency: Personal data must be processed lawfully, fairly, and in a transparent manner.
What is the second principle of data protection?
Purpose Limitation:
Personal data should be collected for
specified,
legitimate purposes and
not further processed in a manner incompatible with those purposes.
What is the third principle of data protection?
Data Minimization:
Only personal data that is necessary for the intended purpose should be collected and processed.
What is the fourth principle of data protection?
Accuracy: Personal data must be
accurate and
kept up to date; inaccurate data should be rectified or deleted without delay.
What is the fifth principle of data protection?
Storage Limitation: Personal data should not be kept in a form that allows identification of data subjects for longer than necessary.
What is the sixth principle of data protection?
Integrity and Confidentiality:
prevent
1. unauthorized access,
2. loss, or
3. damage
by securely processing pesonal data
What is the seventh principle of data protection?
Accountability:
Data controllers are
responsible for complying with data protection principles and must
demonstrate compliance.
What is the eighth principle of data protection?
Data Subject Rights: Data subjects have rights to
1. access,
2. rectify,
3. erase, and
4. restrict processing of their personal data.
What is the ninth principle of data protection?
Consent:
…obtained from data subjects before processing their personal data, and
it must be informed and specific.
What is the tenth principle of data protection?
Data Protection by Design:
Data protection measures should be integrated into the development of business processes and systems.
What is the eleventh principle of data protection?
Data Protection by Default: Only personal data necessary for a specific purpose should be processed by default.
What is the twelfth principle of data protection?
Cross-Border Data Transfer:
Personal data can only be transferred outside the jurisdiction if adequate protection is ensured.
What is the thirteenth principle of data protection?
Data Security:
implement appropriate technical and organizational measures to protect personal data.
What is the fourteenth principle of data protection?
Regular Audits:
…conducted to ensure compliance with data protection principles and identify areas for improvement.
What are the Principles of Data Protection?
- Lawfulness, Fairness and Transparency
- Purpose Limitation
- Data minimization
- Accuracy
- Storage Limitation
- Integrity and Confidentiality
- Accountability
- Data Subject Rights
- Consent
- Data Protection by Design
- Data Protection by Default
- Cross-Border Data Transfer
- Data Security
- Regular Audits