This entry is also available in:
The GDPR (General Data Protection Regulation) regulates everything related to personal data processing in the EU. t has been created to guarantee and protect our freedoms and rights, especially our honour, as well as personal and family intimacy. That’s why it is interesting to know the basic principles of the Regulation:
- Lawfulness, fairness and transparency: personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject. Data processing must be done in accordance with the law, and the interested parties must be informed about the treatment that will be carried out on their data. The interested parties have a series of specific rights in the matter, which must be attended by the organizations.
- Purpose limitation: personal data must be only collected for a specific, explicit and legitimate purpose. They can be collected and used only for the purposes that have been transmitted to the interested party and on which consent has been received, when necessary.
- Data minimisation: only the minimum necessary data should be collected; those that are relevant and essential for a specific purpose.
- Accuracy: the data must be exact and always updated.
- Storage limitation: data must be retained for a limited period of time as necessary, and then they must be erased.
- Integrity and confidentiality:this principle stands for taking all required measures to ensure all the personal data is protected.
- Accountability: the Regulation establishes a proactive responsibility on the part of the data controller and the data protection officer (DPO). It is necessary to have specific procedures in the matter, and to register all the associated documentation, to be able to demonstrate, if requested by the authorities, that the law is complied with.