The GDPR fundamental principles

All processing of personal data must comply with the fundamental principles stated in the General Data Protection Regulation (GDPR).

Principles that are to permeate personal data processing

The General Data Protection Regulation states a number of fundamental principles that can be said to be the core of the regulation. The principles apply in the case of all processing of personal data and it is important that you understand and apply them.
Always have the principles at the back of your mind when you are working with personal data processing.

The principles in brief

The principles mean among other things that as data controllers you:
• must have a lawful basis under the General Data Protection Regulation to be able to process personal data
• may only collect personal data for specific, explicitly stated and legitimate purposes
• are not to process more personal data than is necessary for those purposes
• are to ensure that the personal data is accurate
• are to erase the personal data when it is no longer needed
• are to protect the personal data, for example so that unauthorised persons are not given access to it and so that it is not lost or destroyed
• are to be able to demonstrate that and how you live up to the General Data Protection Regulation.

Accountability

Anyone familiar with the Personal Data Act will recognise these fundamental principles. A new aspect, however, is that it is no longer sufficient to comply with the law but the data controller must also be able to demonstrate that and how the provisions of the General Data Protection Regulation are complied with.
(Source: Integritetsskyddsmyndigheten IMY (fka Datainspektionen)

Personal data collected and processed by the preschool may be handled in the examples listed below

© Copyright IV - Idéburen Välfärd