the GDPA

the GDPA

1. data must be kept secure

2. data must be relevant

3. data must be kept no longer than necessary

4. data must be kept accurate and up to date

5. data must be obtained and processed lawfully

6. data must be processed within the data subject rights

7. data must be obtained and specified for lawful purposes

8. data must not be transferred to countries without adequate data protection laws

9. a data subject has data about them stored by a person or company

10. sensitive data contains information like religion or criminal records

11. several government agencies don't have to obey the GDPA