Deep Dive: Data Protection Principles (UK GDPR)

UK GDPR requires personal data to be:

1. Processed lawfully, fairly, transparently - Tell people what you're collecting and why
2. Collected for specific purposes - You can't collect it for one reason and use it for another
3. Adequate, relevant, limited - Only collect what you actually need
4. Accurate - Keep data up to date and correct errors
5. Kept no longer than necessary - Delete data when you don't need it anymore
6. Processed securely - Protect it from unauthorized access, loss, or damage

Individual Rights:

• Right to access their data (see what you hold)
• Right to have data corrected if inaccurate
• Right to have data deleted ("right to be forgotten")
• Right to data portability (move data to another service)