What are the 7 principles of GDPR?

What are GDPR’s 7 Principles? And how do they drive your compliance?

It’s something that anyone processing personal data needs to know, as a breach of GDPR's Principles opens you up to the highest possible fine under GDPR – a whopping 4% of global turnover, or €20million/£17.5million depending on your GDPR.

Our latest Privacy Kitchen goes back to first principles (excuse the pun!), giving a concise overview in just one minute per Principle.

Make sure you stick around for the bonus tip for a bit of expert advice on creating your Privacy Framework.

Links:

GDPR

UK ICO on GDPR’s Principles

Convention 108

[PrivacyKitchen]

Looking to achieve GDPR compliance within your organisation? Arrange a demo and free 14-day trial of Keepabl's award-winning Privacy Management Software:

[MrTizzy]

Fantastic video. Using this as part of my CIPP / US studies. Thanks!

[georgelipinski]

Thank you Robert very important we have included this in our jamjang app

[georgemanning]

I am currently undertaking an NVQ Level 3 in Business Administration which requires me to talk confidently about data protection legislation in my final assessment, and throughout my coursework. This video provides a great explanation of each principle, but is still very much to the point! Really helpful for some additional revision. Many thanks.

[ruifreitasserrano]

Accountability is not a Principle... there are 6 Privacy Principles... not 7... yet that is a detail :) Very well presented !!!

[GangeArtCom]

I am seriously concidering taking someone to court over this.

[governanceriskcompliancegr]

Hello Robert, it was a nice explanation of GDRP principles. Regulatory authorities in EU and other countries are tightening the supervision to ensure Data Protection of Data Subjects by the Data Controllers and Data Processors. Element of Free Data Consent f Data Subjects is of crucial importance.

[stanislavvoloshchuk]

01:12 1. Lawfulness, fairness & transparency
02:18 2. Purpose of limitation
03:05 3. Data minimisation
03:41 4. Accuracy
04:20 5. Storage limitations
05:15 6. Security
05:52 7. Accountability

[dh]

Integrity and confidentiality refers to old principles related to the handling of classified or sensitive information at any level (also known as the CIA triad, but not named after the CIA we all immediately think of). It seems like they have basically shoehorned those words in there because they simply already existed in a field relevant to GDPR in some respects. I am not sure if it is an Americanism that has been adopted by the UK over time, or what...

[qqexbvc]

I believe they use Confidentiality and Integrity rather than the broader "Security" because Security also covers Availability (the security Triad of CIA).

[arsamandi]

I was refused a copy of pc' body worn cam, have they breached GDPR?

[jonbance]

Is it breaching GPDR if a clients name is in an email title..on counselling?

[bizbuildershawaii]

Very understandable overview for newbies like myself... now, what does gdpr stand for?

[Atr]

Hey i wanted to ask, can any thing come up from using a declaration vs a checkbox in any scenario

I agree to Terms and Conditions [checkbox]
I agree to Privacy Policy [checkbox]

vs on registration showing a declaration

By proceeding i agree to [Service]'s Terms and Conditions and Privacy Policy (popular in tech giants, and other apps i've tested, its nicer UX)

I am in a debate with this at work at the moment and am told i am wrong, what about class 2 medical devices?

[felixjbtv]

Can you kindly explain to me how data protection impact your role as a security operative

[rudolfr]

GDPR also counts for goverment organisations I asume not onlys for commercial organisations?

[mrbcrowes]

What would be the legal grounds for unfair dismissal for a private group conversation on Facebook leading to removal from a charity group? i.e if someone was raising awareness of manipulation or asking a question that would lead to a screen shot which in turn would be shown to the leaders.

Thanks for any input, been round the merry go round with google search and Facebook privacy laws.

[TukikoTroy]

I've been watching a lot of 'auditing' videos lately and I'm fully acquainted with an auditor's right to film... but when it comes to publishing, especially when someone belonging to whatever company is being audited specifically says they do not want this being shown on YouTube, I get lost in the tangled and layered swamp that covers privacy. Is auditing for 'personal use'? Do auditors have to comply with GDPR? Can they publish someone's image if they have been asked not to? Do Google rules apply in UK? I'm totally lost with all of the legislation.

[jazzhamster]

Thank you for great video! my neighbour filed and still files false allegations against me to the police. Is there any way to erase these reports from my criminal record? I was interviews by the police and managed to rebut some of the accusations, I have made SAR to the police and received catalogue of different offences reported by my neighbour... this accusations are baseless but still with be recorded on my enhanced DBS check... I dont understand how they can punish me, burden my criminal record, for things I have never than... HELP

[marylincutes]

GDPR is applicable to Europe. But what if someone from Europe is accessing data illegally in Southern hemisphere?
All these fines should apply to that person as well or the company that they work for, right?