Collect data for specified, explicit and legitimate purposes only

Process personal data lawfully, fairly and transparently

Prohibit incompatible further processing

Ensure data adequacy, relevance and necessity

Maintain data accuracy and currency

Take reasonable steps to erase or rectify inaccurate data

Limit data storage duration to necessary period

Implement safeguards for extended storage periods

Ensure appropriate security of personal data

Use appropriate technical or organizational security measures

Take responsibility for compliance with data protection principles