Data must be processed lawfully, fairly, and transparently. 2. **Purpose limitation** — Data must be collected for specified, explicit, and legitimate purposes. 3. **Data minimization** — Only data that is adequate, relevant, and limited to what is necessary may be collected. 4. **Accuracy** — Data