What are the principles of data protection?
First Data Protection Principle - Fair and lawful processing
Fair processing means that you should be informed by the organization using your information (the data controller) who they are and what purpose they will be using the information for. This information should generally be provided to you at the moment it is being collected from you, so for example when you sign up to a service the data controller is providing.
Lawful processing means that there must be a legal ground that permits the organization to use your information, for example your consent or because there is a contract with you and using it is necessary to perform that contract with you.
If you're interested in learning more about this topic, visit our guidance for organizations.