What most regimes require.
WHAT THE PRINCIPLES GENERALLY ARE
Lawfulness, fairness and transparency Purpose limitation Data minimisation Accuracy Storage limitation Integrity and confidentiality Accountability
WHAT LAWFULNESS MEANS
You have a valid basis for processing.
WHAT FAIRNESS MEANS
You do not use data in ways people would find unexpected or detrimental.
WHAT TRANSPARENCY MEANS
People know what you do with their data.
WHAT PURPOSE LIMITATION MEANS
Data collected for one purpose is not used for an unrelated one.
WHY THAT IS FREQUENTLY BREACHED
Data collected for service delivery is later used for marketing.
WHAT MINIMISATION MEANS
Collect only what you need for the stated purpose.
WHY IT IS THE MOST UNDERUSED PROTECTION
What you do not hold cannot be breached, misused or requested.
WHAT ACCURACY REQUIRES
Keeping data correct, and correcting it when told.
WHAT STORAGE LIMITATION REQUIRES
Deleting data when the purpose ends.
WHAT SECURITY REQUIRES
Measures appropriate to the risk.
WHAT ACCOUNTABILITY MEANS
Being able to demonstrate compliance, not merely assert it.
WHY THAT LAST ONE CHANGES EVERYTHING
It shifts the burden: you must have the records.
