A board slide lists “lawfulness, fairness and transparency” as optional best practices. Which correction is required under GDPR?
Select an answer to reveal the explanation.
Short Explanation
Optional is the wrong sticker. Lawfulness, fairness, and transparency are baked into GDPR Article 5 as must-follow principles—more seatbelt law than “nice to have” poster. Ordinary personal data is in scope, not just the sensitive pile.
Full Explanation
Article 5(1)(a) GDPR requires that personal data be processed lawfully, fairly and in a transparent manner in relation to the data subject. These are binding principles for processing, not discretionary best-practice branding. They are not limited to special categories, and they are EU GDPR obligations rather than CIPP/US-only rules.