People have the right to be informed, have the right to object to accuracy, have the right to be forgotten. restricted processing, reticiation of errors or incomplete information, Access to and data to be provided to them in a common format.

Get Consent

Do not use implied consent with peoples personal information always get their explicit permission. If you have a mailing list sign up form, tell people why your collecting the information you are, what they are signing up for and how they can be removed if they wish to.

Limit processing

Data can only be used for the reason someone was told it would be when they gave it to you. Need what you have for something else?, get consent and record it.

Limit Data Collection

Only collected what you actually need for the purpose you will be using it for.

Accuracy

Take steps to make sure the information you have is accurate.

Limit Storage

Do not keep data for longer than you need it. Decide when you are collecting it how long you will keep it for.

Accountablity

Have a clear data protection policy telling people about how their personal information Include:

what you collect, where you store it, how long your keep it for, what you do with it, how someone can find out what you hold about them and how they can get themselves removed