Personal Data shall be processed according to the following controls: 1. Processing shall be carried out in a fair, transparent and lawful manner. 2. Personal Data shall be collected for a specific and clear purpose. It shall not be processed at any later time in a manner incompatible with such purpose. However, it may be processed if the purpose is similar or close to the purpose for which this data is collected. 3. Personal Data shall be sufficient and limited to what is necessary in accordance with the purpose for which the processing is carried out. 4. Personal Data shall be accurate and correct and shall be updated whenever necessary. 5. The necessary measures shall be taken to ensure that incorrect Personal Data is deleted or corrected. 6. Personal Data shall be kept securely, including protecting it from any violation, penetration, or illegal or unauthorized processing through the development and use of appropriate technical and organizational measures and procedures in accordance with the laws and legislation in force in this regard. 7. Personal Data shall not be kept after the purpose of its processing has been exhausted. It may be kept if the identity of the Data Subject has been concealed using the "Anonymization Mechanism" 8. Any other controls set out in the Executive Regulations of this Decree by Law.
Interpretation and application must be checked against the official text and current version.