Chapter II - Principles

Article 5 - Principles relating to processing of personal data

Principle of lawfulness, fairness and transparency
Purpose limitation principle
Data minimization principle
Principle of accuracy
Storage limitation principle
Principle of integrity and confidentiality
Principle of accountability

Article 6 - Lawfulness of processing

Consent of a data subject
Performance of a contract
Compliance with a legal obligation
To protect the vital interests of the data subject or of another natural person
Performance of a task carried out in the public interest
Purposes of the legitimate interests pursued by the controller or by a third party
Implementation of the requirements for the processing in terms of the paragraph 1, points c) and e) of the regulation
Basis for the processing referred to in point (c) and (e) of paragraph 1
Processing for a purpose other than that for which the personal data have been collected originally

Article 7 - Conditions for consent

Obligation to demonstrate the consent for processing the personal data
Transparency of the consent for personal data processing
The right to withdraw his or her consent at any time
Assessing the consent given

Article 8 - Conditions applicable to child's consent in relation to information society services

Requirements for the information society services in context of a child
Obligations of the controller on context of the child when processing the personal data
Restrictions in terms of the Article 8, paragraph 1

Article 9 - Processing of special categories of personal data

Prohibition of processing the special categories of personal data
Exclusions from the prohibition of processing the special categories of personal data
Provisions regarding the processing of special categories of personal data in terms of the Article 9, paragraph 2, point h)
Further conditions regarding the processing of genetic data, biometric data or data concerning health

Article 10 - Processing of personal data relating to criminal convictions and offences

Processing of personal data relating to criminal convictions and offences

Article 11 - Processing which does not require identification

Exemption from the obligation to maintain, acquire or process additional information in order to identify the data subject
Reasons for derogating the exercise of the Articles 15 – 20