Important technical requirements set out in the General Data Protection Regulation (GDPR) are about data...

To ascertain that personal data collection is adequate, relevant and limited to what is necessary in relation to the purposes

To control that data collected for specified, explicit and legitimate purposes is not further processed for other purposes

To keep personal data accurate and up to date, ensuring that inaccurate data are erased or rectified without delay

To make sure that personal data is processed lawfully, fairly and in transparent manner in relation to the data subject