Principles of Data Protection

1. Principles of Data Protection Businesses collect and process client data for varied reasons. In order to ensure proper data protection throughout this process, certain data protection principles must be adhered to Transparency Businesses need to provide clear privacy notes to enable consumers comprehend the privacy policies, provide reasonable access to consumer data, & educate consumers on commercial data privacy. 1 Lawful Basis for Processing Businesses need to provide notice of data collection, use, & sharing practices to consumers and seek permission if use of data differs from the intended use mentioned at time of data collection. 2 Purpose Limitation Businesses should only collect data that is relevant in context to any transaction between the consumer & business or as authorized by the law. 3 Data Minimization This principle reiterates the collection of minimal amount of data that is required by the business. 4 Proportionality Businesses need to implement strict data access policies that are proportionate to the sensitivity of data & nature of its use. 5 Retention 4 This principle requires businesses to implement policies on reasonable retention of data and dispose it once the legitimate purpose of data collection is fulfilled. 6 www.centextech.com Centex Technologies 13355 Noel Road, Suite # 1100, Dallas, TX 75240 Phone: (972) 375 - 9654 501 N. 4th Street, Killeen, TX 76541 Phone: (254) 213 - 4740 1201 Peachtree St NE, Suite 200, Atlanta, GA 30361 Capital Factory, 701, Brazos Street, Austin, TX 78701 Phone: (512) 956 - 5454 Phone: (404) 994 - 5074