What are the main principals of the GDPR?

Question:
What are the main principals of the GDPR?
Answer:

The GDPR states that personal data must be:

  • processed lawfully, fairly and in a transparent manner
  • collected only for specified, explicit and legitimate purposes
  • adequate, relevant and limited to what is necessary
  • accurate and kept up to date
  • held only for the absolute time necessary and no longer
  • processed in a manner that ensures appropriate security of the personal data.