Key principles of GDPR
At the core of GDPR are seven key principles – they're laid out in Article 5 of the legislation – which has been designed to guide how people's data can be handled. They don't act as hard rules, but instead as an overarching framework that is designed to layout the broad purposes of GDPR. The principles are largely the same as those that existed under previous data protection laws. GDPR's seven principles are: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality (security); and accountability. In reality, only one of these principles – accountability – is new to data protection rules. In the UK, all the other principles are similar to those that existed under the 1998 Data Protection Act.