Essential maintenance to our online payments system

Individuals' rights under the General Data Protection Regulation (GDPR)

Individuals have eight rights under GDPR, which reinforce those already in place under the Data Protection Act. These are:

  1. lawful, fair and transparent
  2. purpose limited – specified, explicit, legitimate purposes not incompatible
  3. Data Minimisation - adequate, relevant and limited to what is necessary
  4. accurate – accurate and kept-up-to-date where necessary
  5. storage limitation – kept in a form which permits identification for no longer than necessary
  6. integrity and confidentiality – appropriate security and protection against loss etc