GDPR

GDPR

1. Lawfulness

   • Companies must have a legal reason to collect data, not use data to inflict harm/mislead the user, must inform user that data is being collected

2. Purpose limitation

   • the company must seek consent from the user and only use the users data

3. Data Minimization

   • companies can only receive relevant data for the purpose of their website

4. Accuracy

   • Companies must not store outdated personal information such as phone numbers and adresses

5. Storage limitation

   • Conpanies need to justify the length of time they store user data for.

6. integrity & confidentiality

   • Companies need to store data in a safe and protected manor

7. Accountability

   • companies need to prove that they are acceptably using your data