The principles of data protection under the GDPR are similar to those under the DPA, but include some extra detail. In summary, these are that personal data shall be: ...