Skip to main content

Edit home page content blocks



  • Lawfulness, fairness and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Retention
  • Integrity and confidentiality


Lawful basis for processing

  • Processing of personal data
  • Legitimate Interests Assessment
  • Processing of special category data


Data Subject Rights

  • Right to be informed
  • Right of access (Subject access requests)
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights about automated decision making and profiling


Accountability Obligations

  • Data protection by design and default
  • Data Protection Impact Assessments
  • Information Security Workbook
  • Written agreements
  • Pseudonymisation techniques
  • Information Asset Register
  • Policy, guidance and training
  • Data Protection Officer