Processing principles
Personal information should be processed lawfully and reasonably, for a specific and legitimate purpose, in a manner that is relevant and not excessive, and with reasonable steps to keep it accurate and secure. Further use should remain compatible with the original purpose unless another lawful basis applies.