## Six rules of thumb

The GDPR is based on six principles, also referred to as the rules of thumb. It is important for educators to keep these rules of thumb in mind in every phase of the course. Applying these rules of thumb consistently reduces the risk of errors in handling personal data.

### A brief explanation

Below, you will find the six rules of thumb, each with an associated question. If during the course the answer to one of these questions is 'no’, you will need adjust your course. For instance, by informing students more clearly ('Transparency'), destroying the personal data ('Retention period') or asking for a 'nickname' instead of their real name in a certain app (‘Data minimisation').

Read the six rules of thumb before trying to answer the questions below: