Principles, Purpose limitation
Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing