Article 6
Principles That Govern Processing Activities
The processing of personal data activities shall observe the good faith and the following principles:
- I - purpose: carrying out the processing for legitimate, specific, explicit and informed purposes to the data subject, without the possibility of further treatment incompatible with those purposes;
- II - adequacy: compatibility of the processing with the purposes informed to the data subject, according to the processing activity context;
- III - need: limitation of the processing activity to the minimum necessary for the accomplishment of its purposes, with the comprehensiveness of the relevant data, proportional and not excessive in relation to the purposes of the data processing;
- IV - free access: guarantee to data subjects free and easy consultation about the form and duration of the processing activity, as well as the completeness of their personal data;
- V - data quality: guarantee to data subejcts accuracy, clarity, relevance and updating of the data, according to the need and for the fulfillment of the purpose of its processing;
- VI - transparency: guarantee to data subjects clear, accurate and easily accessible information about the processing and the respective processing agents, observing the commercial and industrial secrets;
- VII - security: use of technical and administrative measures capable of protecting personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication or dissemination;
- VIII - prevention: adoption of measures to prevent the occurrence of damage due to the processing of personal data;
- IX - non-discrimination: the impossibility of carrying out the processing activity for illicit or abusive discriminatory purposes;
- X - responsibility and accountability: demonstration by the agent of the adoption of effective measures capable of proving observance and compliance with personal data protection rules, including the effectiveness of such measures.