What are the main principals of the GDPR?

The GDPR states that personal data must be:

• processed lawfully, fairly and in a transparent manner
• collected only for specified, explicit and legitimate purposes
• adequate, relevant and limited to what is necessary
• accurate and kept up to date
• held only for the absolute time necessary and no longer
• processed in a manner that ensures appropriate security of the personal data.