Lawfulness, Fairness, and Transparency: Data must be processed lawfully, fairly, and in a transparent manner. Purpose Limitation: Data should be collected for specified, explicit purposes and not processed in a manner incompatible with those purposes. Data Minimization: Only data necessary for the purposes should be collected. Accuracy: Data must be accurate and kept up to date. Storage Limitation: Data should only be kept for as long as necessary. Integrity and Confidentiality: Data must be processed securely to protect against unauthorized processing, loss, or damage.