Personal Data Protection as a Civil Right
Among the central guarantees of modern civil rights is the protection of personal data. Article 4 of the Law on Personal Data Protection establishes the principles of processing: data must be processed lawfully, fairly, transparently for the subject and without violating their dignity. Data may be collected only for specific, clearly defined and legitimate purposes and processed only to the extent necessary. They must be accurate and, where necessary, kept up to date; inaccurate data must be corrected, erased or destroyed without unjustified delay. After the purpose is achieved, data must be erased, destroyed or stored in depersonalized form unless storage is determined by law. Appropriate technical and organizational measures must protect the data from unauthorized or unlawful processing, accidental loss, destruction or damage, and the controller must be able to demonstrate compliance with these principles.