Principles of GDPR | University College Cork

What are the principles of GDPR?

The University is responsible for, and must be able to demonstrate, compliance (“accountability”) with the following Data Protection Principles:

Personal data shall be:

Processed lawfully, fairly and in a way that is transparent to the data subject ("lawfulness, fairness and transparency")
Collected, created or processed only for one or more specified, explicit and lawful purpose ("purpose limitation");
Adequate, relevant and limited to what is necessary for those purposes ("data minimisation")
Kept accurate and, where necessary, up-to-date ("accuracy")
Retained no longer than is necessary ("storage limitation")
Kept safe and secure ("integrity and confidentiality")

Office of Corporate & Legal Affairs - Legal & Information Compliance

1st Floor, East Wing, Main Quadrangle,