Principles relating to processing data

These principles shape how personal data should be processed and are meant to lie at the heart of organisations that provide services to EU citizens. The principles are:

• Fairness and transparency.

• Limiting how much data is required for the intended purpose.

• Minimising data.

• Accuracy.

• Limits of storage.

• Integrity and confidentiality.

• Accountability.

The GDPR addresses what organisations must and must not do with your data. For example, you have the right to be informed about how your data is collected and used. You also have a right to know an organisation’s purpose for processing your personal data, how long they retain it and who they will share it with. Ultimately, you have a right to concise, transparent, intelligible and easily accessible information that uses clear and plain language.