Three key principles are associated with General Data Protection Regulation (GDPR) :
- Secularism, loyalty, transparency Data protection: companies must collect and process personal data lawfully, fairly and transparently. This means that individuals must be clearly and transparently informed about how their data is collected. Treaty is used, and that companies must obtain a cxplicit consent individuals before collecting or processing their personal data.
- Purpose limitation Data protection: companies may only collect and process personal data for specific, legitimate and pre-determined purposes. The data collected must be used solely for the purposes for which it was collected and may not be further processed in a way incompatible with these purposes.
- Data minimization Data protection: companies must only collect and process personal data that is necessary to achieve the purposes for which it was collected. The data collected must be adequate, relevant and limited to what is necessary to achieve the intended purpose. It is important not to collect excessive or unnecessary data.
These principles are at the heart of the RGPD, and are designed to ensure that personal data is collected is processed ethically, lawfully and responsibly, respecting individuals' privacy rights. Companies must ensure they comply with these principles when collecting, processing and managing personal data to comply with the RGPD.
