1. Lawful, fair and transparent processing
  2. Purpose limitation
  3. Data minimisation
  4. Accurate and up-to-date processing
  5. Limitation of storage in a form that permits identification
  6. Confidentiality and security
  7. Accountability and liability