Summary
Personal data should be used only for the purposes for which it was collected.
Obligations
Election Parts
Quotes
- Personal data undergoing automatic processing shall be: a. obtained and processed fairly and lawfully; b. stored for specified and legitimate purposes and not used in a way incompatible with those purposes; c.adequate, relevant and not excessive in relation to the purposes for which they are stored; accurate and, where necessary, kept up to date; d. preserved in a form which permits identification of the data subjects for no longer than is required for the purpose for which those data are stored.
- Personal data shall be: (a) processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’).
- Personal data shall be: (...) (b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’).
- Personal information collected should be used only to fulfill the purposes of collection and other compatible or related purposes except: a) with the consent of the individual whose personal information is collected; b) when necessary to provide a service or product requested by the individual; or, c) by the authority of law and other legal instruments, proclamations and pronouncements of legal effect.
- Personal data should be relevant to the purposes for which they are to be used, and, to the extent necessary for those purposes, should be accurate, complete and kept up to date.
- The collection of personal information should be limited to information that is relevant to the purposes of collection and any such information should be obtained by lawful and fair means, and where appropriate, with notice to, or consent of, the individual concerned.
- The legal framework should prohibit the collection, use or dissemination of personal data or information in any manner for any purpose other than the exercise of suffrage rights. In particular, care should be given to provisions that relate to fingerprints, photographs and personal identification numbers, as well as to ethnicity or other factors that could lead to discrimination or place the voter at risk of personal harm.
- In line with the Convention 108 and according to Recommendation CM/Rec(2012)4 on the protection of human rights with regard to social networking services and Recommendation CM/Rec(2016)5 on Internet freedom, social network services should not process personal data beyond the specified purposes for which they have collected it. Electoral campaigning constitutes in most cases a distinct purpose for which distinct consent is required.
- Safeguards might be introduced to protect citizens’ right to privacy. In order to protect private data some countries have introduced restrictions concerning the public access to voters lists.