If you want to collect and handle personal data, you need to know some basic principles about its processing, and that’s what we’ll discuss in these article.
First thing first, let’s define process or processing. This refers to any operation or set of operations that you will do on a personal data. It covers collection, storage, recording, organization, retrieval, updating, modifying, consultation, use, or erasure. In short, anything you wish to do with the data during its life cycle.
Before you ever get your hands on personal data you must remember these principles:
- Collection is for a declared, specified, and legitimate purpose. This means that
- As much as possible, get the consent of the person whose personal data you are collecting.
- Inform that person of your purpose in collecting and processing.
- Collect only those pieces of information that are necessary. If you don’t need birthdates, don’t collect them.
2. Processing of personal data is done fairly and lawfully. This means that
- You must always respect the right of the person whose data you are processing. This means that she can withdraw her consent or object to further processing.
- You must always speak clearly and plainly, so that the information you are giving is easily understood.
- Your processing cannot go beyond your purpose. You cannot say that you are collecting data because you want to deliver an item to her but then use it to send advertisements.
- You must secure the personal data, protect it from hacking, theft, or destruction.
3. Personal data must be kept up-to-date. Inaccurate data must be updated or erased.
4. Personal Data shall not be retained longer than is necessary. This means that
- You cannot retain personal data forever in contemplation of a possible future use yet to be determined.
These are the principles in processing personal data, which can be summed up by three terms—transparency, legitimate purpose, and proportionality.
As long as you keep these principles in mind, you’ll avoid major problems.
