GDPR

GDPR

1. Lawfulness

   • Companies tend to collect data on their websites, so they must have a valid reason for why and must tell the user that their data is being collected.

2. Purpose Limitation

   • The company must seek consent from the user and must only use the users data.

3. Data minimization

   • This restricts the data that they can collect. They're only allowed to receive relevant information.

4. Accuracy

   • Companies mustn't store outdated personal information, eg. Addresses

5. Storage Limitation

   • Companies need to justify the length of time they store your data.

6. Integrity & confidentiality

   • Companies need to store data in a safe and protected manner.

7. Accountability

   • Companies to prove that they are acceptably using your data.