Appropriate policy document
Principle 1 - lawful, fair and transparent
Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
- ensure that personal data is only processed where a lawful basis applies and where processing is otherwise lawful
- only process personal data fairly and will ensure that data subjects are not misled about the purposes of any processing
- ensure that data subjects receive full privacy information so that any processing of personal data is transparent (provision of privacy notices)
- use data protection impact assessments to ensure proposed processing is carried out fairly