The main principles which should underlie the lawful processing of the personal data of individuals by data controllers are set out in LPDP.In compliance with art.2, para.2 of LPDP personal data must be:
· processed in legal compliance and in a bona fide manner;
· collected for specific, precisely defined and legal purposes and not be submitted to additional processing in a manner incompatible with such purposes; additional personal data processing for historical, statistical or research purposes shall be allowed provided the data controller has ensured proper protection, guaranteeing that such data are not being processed for any other purpose;
· proportionate to, related to and not exceeding the scope of the purposes for which they are being processed;
· accurate and updated, if necessary;
· deleted or corrected when found to be imprecise or disproportionate to the purposes for which they are being processed;
· maintained in a form that enables identification of respective individuals for a period not exceeding the time necessary for the purposes for which such data are being processed; personal data which will be stored for a longer period of time for historical, statistical or research purposes shall be kept in a format precluding the identification of individuals.
