Data Protection Principles

Data Protection Principles

Lawfulness, fairness & transparency

Storage limitation

Purpose limitation

Integrity & confidentiality

Data minimisation

Accountability

Accuracy

COMMONMISTAKES

5.Lorem ipsum

1.Lorem ipsum

on Lorem ipsum

6.Lorem ipsum

2.Lorem ipsum

Consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam.

7.Lorem ipsum

3.Lorem ipsum

8.Lorem ipsum

4.Lorem ipsum

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

Got an idea?

Bring it to life with an interactive window

Create a new layer with all the Genially features.

• Generate experiences with your content.
• It’s got the Wow effect. Very Wow.
• Make sure your audience remembers the message.
• Activate and surprise your audience.

• We must identify valid grounds for collecting and using personal data.
• We must ensure that we do not do anything with the data in breach of any other laws.
• We must use personal data in a fair way. This means we must not process the data in a way that is unduly detrimental, unexpected or misleading to the individuals concerned.
• We must be clear, open and honest with people from the start about how we will use their personal data.

• As a business, we have to be clear about why we are processing personal data.
• We also need to record how and why we use personal data and this is covered in our Privacy Statement.
• We must regularly review our processing activities and update our documentation when required.

We must ensure the personal data we are processing is:

• adequate – sufficient to properly fulfil our stated purpose;
• relevant – has a rational link to that purpose; and
• limited to what is necessary – you do not hold more than you need for that purpose.

This means that we must:

• Only collect personal data we actually need for our specified purposes.
• Have sufficient personal data to properly fulfil those purposes.
• Periodically review the data we hold, and delete anything we don’t need.

• We should take all reasonable steps to ensure the personal data we hold is not incorrect or misleading.
• We must have systems in place to keep data up to date.
• If we discover that personal data is incorrect or misleading, we must take reasonable steps to correct or erase it as soon as possible.
• We must allow data subjects to request to update or correct the data we hold on them.

• We must not keep personal data for longer than we need it.
• We need to carefully consider and justify how long we keep personal data.
• We must set out our retention periods in our Data Protection Policy.
• We must review our information and erase or anonymise personal data when we no longer need it.
• We must have processes in place to deal with requests to have data erased.

• We must ensure that we have appropriate security measures (both technical & organisational) in place to protect the personal data we hold and this includes physical data and data which is stored electronically.
• Technical measures could include multi-factor authentication, an authenticator app, passwords, encryption etc.
• Organisational measures include staff training, policies & procedures etc.

If there is a data breach, data subjects must legally be informed within 72 hours of he breach.

• We are required to take responsibility for what we do with personal data and how we comply with the other principles.
• We must also have appropriate measures and records in place to demonstrate compliance.
• We must all complete GDPR training and be aware of our company policies & procedures.