{"id":266,"date":"2019-08-19T12:48:39","date_gmt":"2019-08-19T12:48:39","guid":{"rendered":"http:\/\/www.dataprotectionconsultant.it\/EN\/?p=266"},"modified":"2020-05-11T08:15:28","modified_gmt":"2020-05-11T08:15:28","slug":"principles-relating-to-processing","status":"publish","type":"post","link":"https:\/\/www.dataprotectionconsultant.it\/EN\/principles-relating-to-processing\/","title":{"rendered":"Principles relating to processing"},"content":{"rendered":"<p><a href=\"http:\/\/www.dataprotectionconsultant.it\/principi-applicabili-al-trattamento\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-43\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-100x100.jpg 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-150x150.jpg 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a> <a href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/principles-relating-to-processing\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-44\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-100x100.png 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-150x150.png 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: center;\"><span style=\"color: #ff0000; font-size: 18pt;\"><strong>Principles relating to processing of personal data<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #ff0000; font-size: 14pt;\"><strong>These are the principles relating to processing of personal data<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>Compliance with the GDPR requirements is based on the application of the principles relating to processing of personal data: this means to adhere to the <span style=\"text-decoration: underline; color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/accountability-governance\/\">accountability<\/a><\/span>\u00a0principle.<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>Here is the list of such principles:<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>1. \u00ablawfulness, fairness and transparency\u00bb: this means that data processing shall be lawful, correct and transparent to the data subject. Data subjects shall be able to have a constant and aware monitoring of processing of personal data since the time of their collection <\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>2. \u00abpurpose limitation: data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner which is incompatible with those purposes. Data collection shall not be indeterminate as for the purposes of processing: it must be clear why data are collected and then processed. Clarity about data processing is of the utmost importance<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>3. \u00abdata minimisation\u00bb: this means that data collected shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. This principle recalls the requirement of <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/data-protection-by-design-by-default\/\">data protection by design and by default<\/a><\/span><\/span><\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong>4. \u00abaccuracy\u00bb: this means that data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay. The data subject\u2019s privacy is to be protected not only by the security of processing, but data relating to the person shall be accurate and, where feasible, without errors<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong> 5. \u00abstorage limitation\u00bb: personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which their personal data are processed. It is a very important principle which is emphasised by the GDPR: it requires to determine the period for which personal data will be stored, or if that is not possible, the criteria used to determine that period (to be indicated in <a style=\"color: #000000;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/obligations-of-information-to-data-subject\/\">i<span style=\"text-decoration: underline;\"><span style=\"color: #0000ff; text-decoration: underline;\">nformation to be provided ex arts. 13-14, GDPR<\/span><\/span><\/a> and in the <span style=\"text-decoration: underline; color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/records-of-processing-activities\/\">Records of processing activities<\/a><\/span>). After that period, personal data shall be anonymised or erased, unless the storage is mandatory to comply with laws or regulations<\/strong><\/span><\/p>\n<p style=\"text-align: justify; padding-left: 40px;\"><span style=\"color: #000000;\"><strong> 6. \u00abintegrity and confidentiality\u00bb: these are principles which recall security of processing, since appropriate technical and organisational measures must be implemented to ensure personal data security and their protection, so that unauthorised or unlawful processing and accidental loss, destruction or damage are mitigated.<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>In this framework there is the requirement of <span style=\"text-decoration: underline; color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/accountability-governance\/\">accountability<\/a><\/span>: the controller shall be <span style=\"text-decoration: underline;\">responsible for complying with these principles and be able to demonstrate<\/span> \u2013 with written and updated\u00a0documentation \u2013 <span style=\"text-decoration: underline;\">that such principles are respected<\/span>.<\/strong><\/span><\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>To learn more, read <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/faq-principles-relating-to-processing\/\">FAQs<\/a><\/span><\/span> or <span style=\"text-decoration: underline;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/contacts\/\">contact me<\/a><\/span><\/span>.<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Principles relating to processing of personal data These are the principles relating to processing of personal data Compliance with the GDPR requirements is based on the application of the principles relating to processing of personal data: this means to adhere to the accountability\u00a0principle. Here is the list of such principles: 1. \u00ablawfulness, fairness &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.dataprotectionconsultant.it\/EN\/principles-relating-to-processing\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Principles relating to processing&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/266"}],"collection":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/comments?post=266"}],"version-history":[{"count":13,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/266\/revisions"}],"predecessor-version":[{"id":1092,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/266\/revisions\/1092"}],"wp:attachment":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/media?parent=266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/categories?post=266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/tags?post=266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}