What are the 6 principles of GDPR?

Question 1

Lawfulness, fairness and transparency

Answer 1

Organisations should only process personal data lawfully and in a fair way. People must be told very clearly what the organisation intends to do with the personal data collected.

Question 2

Purpose Limitation

Answer 2

Personal data should be collected for specific, explicit and legitimate purposes, which is clearly told to the data subject. The personal data cannot be used for any other purpose.

Question 3

Data Minimisation

Answer 3

Personal data should be adequate, relevant and limited to what is needed.

Question 4

Accuracy

Answer 4

Personal data must be accurate, and where necessary, kept up to date. Reasonable steps should be taken to rectify any data that is found to be inaccurate.

Question 5

Storage Limitation

Answer 5

Personal data should not be kept for any longer than is necessary for the purpose it was collected for. When not needed it must be disposed of securely.

Question 6

Integrity and Confidentiality

Answer 6

Personal data must be protected against unauthorised access, accidental loss, destruction or damage. Both physical and technical controls should be used as appropiate.