There are seven key principles that form the foundation of GDPR:
Lawfulness, fairness, and transparency: Data must be processed lawfully, fairly, and in a transparent manner. Purpose limitation: Data should be collected for specified, explicit, and legitimate purposes. Data minimization: Data collected should be adequate, relevant, and limited to what is necessary. Accuracy: Data must be accurate and kept up to date. Storage limitation: Data should not be kept in a form that permits identification of data subjects for longer than necessary. Integrity and confidentiality: Data should be processed in a manner that ensures security. Accountability: Organizations must be able to demonstrate compliance with these principles.