Skip to main content
SDUnet

Treatment principles

The data protection rules contain some basic principles that you should always follow. If you are unsure about how to process personal data, you can always refer back to the principles and make sure you follow them.

1. Lawfulness, fairness and transparency

Processing must comply with data protection rules and be transparent

2. Purpose limitation

At the time of collection, it must be clear for which legitimate purposes the data will be used. Subsequent processing must not be incompatible with these purposes

3. Data minimisation

Processing, including storage of data, must be limited to what is necessary to fulfil the purpose

4. Accuracy

Data must be kept up to date and inaccurate data must be erased or rectified

5. Retention limitation

When it is no longer necessary to process the data, it must be anonymised or deleted

6. Integrity and confidentiality

Data must not be disclosed to unauthorised persons, lost or damaged

Do you have any questions?

The GDPR and Information Security Coordinators are your local contact and advisor for day-to-day data protection and information security at SDU.