GDPR: Everything You Need to Understand About the Principle of Lawfulness, Fairness and Transparency

The answer to the survey "Personal data must be processed in a manner…with regard to the data subject??"

To introduce the subject, we offered you a survey on February 8th on our LinkedIn page. We asked you in what manner personal data must be processed with regard to the data subject.

Our subscribers are talented! Out of 192 voters, 97% of you chose "Lawful, fair and transparent". Indeed, personal data must be processed in a manner that is lawful, fair and transparent in relation to the data subject.

Understanding Lawfulness, Fairness and Transparency

These are obligations that the Data Controller must comply with. 🤷‍♂️
For each processing operation, they determine a purpose. This processing purpose is based on a legal basis. When the data controller determines the legal basis for processing, they fulfill their obligation to carry out processing lawfully.
The Data Controller must also process data in conditions that respect personal data protection and are not misleading for the data subjects. The data controller must therefore act fairly when carrying out data processing.
The principle of fairness is closely linked to the principle of transparency. To comply with this transparency obligation, they must inform the data subjects. Information to individuals must be provided in a clear and understandable manner.

And more concretely?

• Data processing may be authorized by law (therefore lawful) but unfair because the data controller does not inform individuals.
• Conversely, processing may be transparent for the data subjects; but completely unlawful, due to prohibitions provided for by certain texts that are not respected.

The principle of lawfulness is simple to demonstrate; however, the principle of fairness is governed by several obligations:

• inform the data subjects
• enable data subjects to exercise their rights
• limit the retention of processed data
• ensure the confidentiality and security of data.

# Data Comply One (ex Mission RGPD) Addressing the Principle of Lawfulness, Fairness and Transparency

Don't have time to set everything up? Feeling lost with all this information?

No worries! ✅ With Data Comply One (formerly Mission RGPD), you can identify your legal bases in each record of your processing register. You'll also find our privacy policy templates (internal policy and external policy) to inform data subjects by providing all necessary information. Finally, you can make a data subject rights request form available directly on your website.

Don't waste any more time, it's so simple!