What are the principles of GDPR?

The University is responsible for, and must be able to demonstrate, compliance (“accountability”) with the following Data Protection Principles: 

Personal data shall be: 

• Processed lawfully, fairly and in a way that is transparent to the data subject ("lawfulness, fairness and transparency")
• Collected, created or processed only for one or more specified, explicit and lawful purpose ("purpose limitation"); 
• Adequate, relevant and limited to what is necessary for those purposes ("data minimisation")
• Kept accurate and, where necessary, up-to-date ("accuracy")
• Retained no longer than is necessary ("storage limitation")
• Kept safe and secure ("integrity and confidentiality")