Shadowing Practice: What are the 7 principles of GDPR? - Learn English Speaking with Video
Choose a practice mode
Each mode opens a full-screen practice room.
113 sentences
If sentences are too short or too long, click Edit to adjust them.
1
So what are GDPR's seven principles and how do they drive your compliance?
2
We'll tell you in just a minute per principle.
3
And you do need to know because breach of the principles leads to the highest fine under GDPR.
4
4% of your global turnover or 20 million euros or 17.5 million pounds, depending on your GDPR, whichever is higher.
5
That's the maximum fine.
6
So stick with us and also for the bonus tip on creating your privacy framework.
7
Hi, I'm Robert Boar, the founder and CEO of Keepable, the award-winning privacy solution saving you time money
8
and stress on GDPR giving you great insights for the board
9
and answers for customers do check us out on keepable.com this
10
video is part of privacy kitchen free video help on GDPR
11
and all things privacy if you're new here please do click subscribe
12
and notify to hear about all of our fantastic new videos as always links are in the notes below
13
and we'll just use GDPR for both EU and UK GDPRs because they're identical on this point at least for the moment.
14
That's for another video.
15
Right, grab a cup of coffee and let's crack on.
16
Okay, so here are GDPR's seven principles.
17
They're set out in Article 5 of GDPR.
18
Now, articles for GDPR is like a section for other laws, so it's like saying Section 5, but let's not go there.
19
Right, number one, lawful, fair and transparent.
20
Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.
21
Now, unsurprisingly, this is the lawfulness fairness and transparency principle
22
but the focus has mostly been on lawful
23
and transparent gives you a very good position on fairness
24
so people do often call this the lawfulness principle
25
or transparency principle now lawful includes identifying a legal basis for your processing we've got videos on
26
that and there have been fines for not identifying one
27
and for identifying the wrong one like consent legitimate interests etc and obviously this also includes otherwise complying with the law.
28
Now, transparent includes providing all the information
29
that GDPR says you've got to give individual data subjects about what you're doing with their personal data.
30
None of this, again, is new.
31
Most of GDPR was there before in the directive.
32
Now, fairness is subjective, but it plays into the reasonable expectations of the individual.
33
As the UK SEO states, this means you must not process the data in a way that's unduly detrimental, unexpected, or misleading to the individuals concerned.
34
Right, principle number two, purpose limitation.
35
You should only collect personal data for specified, explicit and legitimate purposes and not process it in a manner that's incompatible with those purposes.
36
This is the purpose limitation principle, it makes total sense.
37
You can't tell people you're only going to process their data to provide, say, software services to them and then suddenly sell them insurance.
38
The key takeaway here, when you're creating your privacy notices for that transparency principle, make sure you cover the purposes for which you're processing the data.
39
It's not easy to suddenly start processing for a new purpose if you haven't identified it up front.
40
There are some exceptions for research and statistics which aren't seen as incompatible
41
and this is one area the UK is looking at in its new August 2021 onwards review
42
and we'll see how that goes.
43
Now number three data minimization.
44
Personal data that you process must be adequate and relevant
45
and limited to what's necessary in relation to the purposes for what you're processing.
46
Data minimization means you don't collect more personal data than is necessary for your stated purpose.
47
It's actually always been the case as I said before
48
but GDPR's fines
49
and increased awareness means it's clear you've got to be focused on only collecting what's necessary
50
and a good benefit if you're selling this to other team members.
51
Having less personal data means there's less to protect against breach, less risk and less to search for a data subject request.
52
Okay accuracy.
53
Personal data you process must be accurate and kept up to date where necessary.
54
This is the accuracy principle.
55
This also includes taking every reasonable step to ensure that any inaccurate personal data for those purposes are erased or rectified, corrected without delay.
56
So this points to a couple of the data subject rights, the right to rectification or to correct incorrect data, and one aspect of the right to erasure.
57
Accuracy principles don't normally cause much issue.
58
Now storage limitation.
59
This principle says that when you have personal data, you should only keep it in a form which permits identification of the data subjects, as in keep it as personal data,
60
for no longer than necessary for the purposes for which you're processing it, which you've told in the transparency principle.
61
This is the storage limitation principle, and again there are some research and stats exemptions.
62
But when you hear the word retention, this is what it relates to.
63
Not keeping personal data for any longer than necessary for your specified purposes.
64
Some retention periods are set out in law, like on tax and maternity, paternity records, for example.
65
But mostly this is about a commercial decision, what's necessary and relevant for your purpose.
66
But beware, regulators aren't going to accept infinity because you might use it someday.
67
It's got to be reasonable.
68
Now, another benefit as well, because you're having appropriate retention periods, you either delete or anonymize that data at the end,
69
which means again there's less attack surface for risk and breach
70
and also less to search when you have a data subject request.
71
However, retention is the area I believe presents the most difficulty in GDPR compliance programs, and it's not just about GDPR's any privacy.
72
Okay, security.
73
Now of course at all times personal data must be secure, and GDPR's security principle requires that personal data is processed in a that ensures appropriate security to personal data,
74
including against unauthorized or unlawful processing and accidental loss, destruction or damage.
75
You've got to use appropriate technical and organizational measures for security.
76
Why they call it integrity and confidentiality principle, I don't know.
77
They should just say security.
78
Everyone calls it the security principle.
79
So security is fundamental to privacy, but it's only one of the seven principles.
80
Most of GDPR is not about security.
81
Look at our very polemic ISO 27001 is not GDPR video and see what what we mean.
82
Now the seventh principle, accountability.
83
If you're a controller, you're responsible for compliance with the other six principles
84
and to be able to demonstrate compliance with those other six principles.
85
This seventh principle is the accountability principle and it's the main change the principles brought in by GDPR.
86
Now although it's number seven you've got to bake this in from the start.
87
GDPR enshrined data protection by design and by defaulting to law and brought in various obligations on records.
88
So this accountability principle means you have privacy governance in place focused on GDPR
89
and you're able to demonstrate that compliance to regulators, but also to the board, auditors, investors, customers and partners.
90
And now for our bonus tip.
91
Fantastic.
92
If you're looking to create privacy governance to cover more than one jurisdiction, it's a good thing to make it principles based.
93
And then you can tailor it for each jurisdiction's particularities.
94
Now, GDPR set the standard globally for data protection, copied to various degrees from California to India, from Brazil, Caribbean and China.
95
And it's not surprising, the seven principles in GDPR are actually all from the Council of Europe's Convention 108 from 1981.
96
That was the first legally binding international instrument on data protection.
97
55 signatures including all the EA, the UK, Turkey, Russia and it contains all of these principles.
98
Right so there we go.
99
You now know what the seven principles are of GDPR.
100
You know how they drive your compliance and how they can underpin a global program.
101
Please do look at our other Privacy Kitchen videos.
102
I mentioned the 27001 video.
103
We've got a 27701.
104
What is GDPR?
105
10 steps to GDPR compliance, also very popular.
106
Do visit us at Keepable.com, take a demo, and please do use hashtag Privacy Kitchen to tell us the topics you want us to cover.
107
So stay well in the meantime, and we'll see you soon in Privacy Kitchen.
108
Did this video make the topic easy for you?
109
Well, that's what Keepable software is all about, making GDPR compliance a breeze, instantly creating the insights you need to prove your compliance to the board and customers alike.
110
Why not see for yourself by booking your demo at Keepable.com.
111
And while you're there, we have a whole host of content on our blog, including real-life customer stories, insightful posts, and useful downloads.
112
Hit the link in the video description or visit us at Keepable.com.
113
Looking forward to speaking with you soon.
Download App
Everything you need to speak fluently
AI PronunciationScore every sentence
IPA PracticeMaster every sound
VocabularyBuild your word bank
Vocab GameLearn while playing
✨ Recommend Video
C14
23 sentences
HRM: Compensation and Benefits (Chapter 7)
Business EnglishUniversity StudentsWorking Adults
C1113 sentences
Schuldgefühle überwinden: 7 Tipps, um das schlechte Gewissen loszuwerden
Business EnglishUniversity StudentsWorking Adults
C16
228 sentences
Cybersecurity Architecture: Five Principles to Follow (and One to Avoid)
Business EnglishUniversity StudentsWorking Adults
B21
20 sentences
DataLayer explained in 90 seconds
Business EnglishWorking Adults
C12
183 sentences
Trademark enforcement: Dealing with infringement on social media and e-commerce platforms
Business EnglishWorking Adults
B21
21 sentences
7 metrics you NEED to know as a CEO
Business EnglishWorking Adults
B21
152 sentences
Never Do These 4 Things On Your Work Computer (Lawyer's Warning)
Business EnglishDaily ConversationWorking Adults
C11
70 sentences
Ricardo Vargas Shows How to Implement Governance During Project Execution
Business EnglishWorking Adults
C11
43 sentences
What is an Organization? - the Nature of Organizations
Business EnglishUniversity StudentsWorking Adults
C12
150 sentences
15 IT Terms Everyone In Tech Recruitment Should Know – IT & Tech Recruitment Insights
Business EnglishWorking Adults
C13
80 sentences
What is clean code? - Uncle Bob
Business EnglishUniversity StudentsWorking Adults
B21
32 sentences
GS1-standarder för e-handel
Business EnglishWorking Adults
Vocabulary and speaking notes for this lesson
This B2 speaking lesson is built on the video “What are the 7 principles of GDPR?”. The speaker keeps coming back to these words: principle, Gdpr, personal, privacy, purpose. This video has 113 sentences and 1489 words to shadow. The speech runs for 8:00. The speaker talks fast, about 186 words per minute, so expect linked and reduced sounds. Only 80% of the words are among the 3,000 most common in English, so the vocabulary is demanding.
Key vocabulary in this video
The 15 most advanced words in the video, with pronunciation and meaning:
| Word | Pronunciation | Meaning |
|---|---|---|
| compliance noun | /kəmˈplaɪ.əns/ | An act of complying. |
| keepable adjective | That can be kept or is worth keeping. | |
| limitation noun | /lɪmɪˈteɪʃən/ | The act of limiting or the state of being limited. |
| retention noun | /ɹɪˈtɛnʃən/ | The act of retaining or something retained. |
| transparency noun | /tɹænsˈpæɹənsi/ | The quality of being transparent. |
| transparent adjective | /tɹænsˈpæɹənt/ | See-through, clear; having the property that light passes through it almost undisturbed, such that one can see through it clearly. |
| lawful adjective | /ˈlɔfl̩/ | Conforming to, or recognised by the laws of society. |
| fairness noun | /ˈfɛɚ.nəs/ | The property of being fair or equitable. |
| accountability noun | /əˌkaʊn.təˈbɪl.ə.ti/ | The state of being accountable; liability to be called on to render an account or give an explanation; liability to be held responsible or answerable for… |
| breach noun | /ˈbɹiːt͡ʃ/ | A gap or opening made by breaking or battering, as in a wall, fortification or levee / embankment; the space between the parts of a solid body rent by violence. |
| incompatible adjective | /ˌɪŋkəmˈpætɪbəl/ | Of two or more things: that cannot coexist; not congruous because of differences; unable to function together due to dissimilarities. |
| lawfulness noun | Property of being lawful, of obeying the law. | |
| minimization noun | /ˈmɪn.ɪ.mɪˈzeɪʃən/ | The act of lowering something to its smallest value or extent. |
| regulator noun | /ˈɹɛɡ.ju.leɪ.tɚ/ | A device that controls or limits something. |
| specify verb | /ˈspɛs.əˌfaɪ/ | To state explicitly, or in detail, or as a condition. |
Phrasal verbs you will hear
| Word | Meaning |
|---|---|
| look forward to verb | To anticipate, expect, or wait for, especially with a feeling of approval or pleasure; to be excited or eager to. |
Grammar in this video
The structures the speaker uses most, with the exact words from the video:
| Structure | In the video |
|---|---|
| Passive voice be + past participle — the focus is on what happens, not who does it | must be processed · aren't seen · are erased |
| Present perfect have/has + past participle — a past action that still matters now | have been · haven't identified · It's actually always been |
Pronunciation to watch
The speaker uses 35 contractions and reduced forms, such as you're, you've, we'll. Say them the short way, as you hear them.
- The “sh” and “zh” sounds: limitation /lɪmɪˈteɪʃən/, retention /ɹɪˈtɛnʃən/, minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/, enshrine /ɪnˈʃɹaɪn/, erasure /ɪˈɹeɪʃɚ/
- Long words — get the stress right: limitation /lɪmɪˈteɪʃən/, transparency /tɹænsˈpæɹənsi/, accountability /əˌkaʊn.təˈbɪl.ə.ti/, incompatible /ˌɪŋkəmˈpætɪbəl/, minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/
How to practise with this video
- Listen to the whole video once without speaking and note the words you do not know.
- Start at 0.75× speed, shadow it sentence by sentence, then go back to normal speed once it feels easy.
- Record yourself and compare with the original, paying attention to words like compliance, keepable, limitation.
What is the Shadowing Technique?
Shadowing is a science-backed language learning technique originally developed for professional interpreter training and popularized by polyglot Dr. Alexander Arguelles. The method is simple but powerful: you listen to native English audio and immediately repeat it out loud — like a shadow following the speaker with just a 1–2 second delay. Unlike passive listening or grammar drills, shadowing forces your brain and mouth muscles to simultaneously process and reproduce real speech patterns. Research shows it significantly improves pronunciation accuracy, intonation, rhythm, connected speech, listening comprehension, and speaking fluency — making it one of the most effective methods for IELTS Speaking preparation and real-world English communication.