The UK GDPR sets out seven key principles for processing personal data. These principles lie at the heart of the general data protection regime. They don’t give hard and fast rules, but embody the spirit of the law. Failure to comply with the principles may leave you open to substantial fines. This could mean a fine of up to 17.5 million or 4% of your total worldwide annual turnover, whichever is higher. For more detail on each principle, please read the relevant page of this guide.”]