In particular, the following principles will be respected:
- Lawfulness, fairness and transparency
Personal data must be processed lawfully, fairly and in a transparent manner.
- Purpose limitation
Personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- Data minimisation
Personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Personal data must be accurate and, where necessary, kept up to date. Inaccurate personal data should be corrected or deleted.
- Data retention
Personal data should be kept in an identifiable format for no longer than is necessary.
- Integrity and confidentiality
Personal data should be kept secure.
Personal data processing and all related measures must be recorded for accountability.
These commitments are further detailed in the internal and external Privacy Statements and internal Rules.
This page was last updated on 23 April 2019