The Act outlines the principles and lawful basis for processing personal data. Personal data must be processed in a fair, lawful, and transparent manner. It should be collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes. The processing should be limited to the minimum necessary data and retained for a duration aligned with the lawful bases for processing. Accuracy, completeness, and relevance of personal data must be maintained, and appropriate security measures should be implemented to protect against unauthorized or unlawful processing, access, loss, destruction, or data breaches…