Page 148 - iyi-yonetim-ilkleri

Manual On Good Administration Principles

Recommendations to the Administration
Regarding the Principle

In order to prevent the personal data from being used by the public
institutions and organisations as a way to restrict or violate the fundamental
rights and freedoms of the individuals, the administration must consider
the following points:
➢ Personal data must be collected and processed in compliance with the
Constitution, law, and international regulations.
➢ While collecting and processing personal data, the acts must proceed
transparently, and the persons concerned must be informed about
the subject clearly. In other words, with the exceptions specified in
the legal arrangements, while keeping or processing personal data,
explicit consent of the data subject must be sought in order to protect
individuals from arbitrary interventions.
➢ Accurate information must be collected regarding the data subject,
regular checks must be put in place in order to update the data and
ensure their reliability.
➢ Personal data must be collected and processed in accordance with the
specified legitimate purposes and it must be ensured that data subject
know these purposes in advance.

➢ Personal data must not be used for any purpose other than envisaged.
➢ The administration must avoid collecting unnecessary information, for
any purpose other than specified and it must pay regard to collecting
and processing proportional and sufficient data, which are in line with
the predetermined target.
➢ Retention period for personal data must be limited to the duration for
achievement of the specified purpose and such data must be erased
after the purpose is achieved.

➢ Personal data must be kept and processed by authorised persons;
necessary measures must be taken in order to prevent such data from
transmission to or being used by non-authorised persons.
➢ Data subject must have the opportunity to learn the purpose of
processing of personal data, to request rectification of personal data if
processed inaccurately as well as erasure of personal data.

147