A better understanding what GDPR is about:
Introducing a notion of “accountability”, GDPR is also stating 7 principles. As a company handling personal information, you need to be consistent with those GDPR principles.
- – Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Storage limitation
- Data security