跟读练习: What are the 7 principles of GDPR? - 通过视频学习英语口语

So what are GDPR's seven principles and how do they drive your compliance?

We'll tell you in just a minute per principle.

And you do need to know because breach of the principles leads to the highest fine under GDPR.

4% of your global turnover or 20 million euros or 17.5 million pounds, depending on your GDPR, whichever is higher.

That's the maximum fine.

So stick with us and also for the bonus tip on creating your privacy framework.

Hi, I'm Robert Boar, the founder and CEO of Keepable, the award-winning privacy solution saving you time money

and stress on GDPR giving you great insights for the board

and answers for customers do check us out on keepable.com this

video is part of privacy kitchen free video help on GDPR

and all things privacy if you're new here please do click subscribe

and notify to hear about all of our fantastic new videos as always links are in the notes below

and we'll just use GDPR for both EU and UK GDPRs because they're identical on this point at least for the moment.

That's for another video.

Right, grab a cup of coffee and let's crack on.

Okay, so here are GDPR's seven principles.

They're set out in Article 5 of GDPR.

Now, articles for GDPR is like a section for other laws, so it's like saying Section 5, but let's not go there.

Right, number one, lawful, fair and transparent.

Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Now, unsurprisingly, this is the lawfulness fairness and transparency principle

but the focus has mostly been on lawful

and transparent gives you a very good position on fairness

so people do often call this the lawfulness principle

or transparency principle now lawful includes identifying a legal basis for your processing we've got videos on

that and there have been fines for not identifying one

and for identifying the wrong one like consent legitimate interests etc and obviously this also includes otherwise complying with the law.

Now, transparent includes providing all the information

that GDPR says you've got to give individual data subjects about what you're doing with their personal data.

None of this, again, is new.

Most of GDPR was there before in the directive.

Now, fairness is subjective, but it plays into the reasonable expectations of the individual.

As the UK SEO states, this means you must not process the data in a way that's unduly detrimental, unexpected, or misleading to the individuals concerned.

Right, principle number two, purpose limitation.

You should only collect personal data for specified, explicit and legitimate purposes and not process it in a manner that's incompatible with those purposes.

This is the purpose limitation principle, it makes total sense.

You can't tell people you're only going to process their data to provide, say, software services to them and then suddenly sell them insurance.

The key takeaway here, when you're creating your privacy notices for that transparency principle, make sure you cover the purposes for which you're processing the data.

It's not easy to suddenly start processing for a new purpose if you haven't identified it up front.

There are some exceptions for research and statistics which aren't seen as incompatible

and this is one area the UK is looking at in its new August 2021 onwards review

and we'll see how that goes.

Now number three data minimization.

Personal data that you process must be adequate and relevant

and limited to what's necessary in relation to the purposes for what you're processing.

Data minimization means you don't collect more personal data than is necessary for your stated purpose.

It's actually always been the case as I said before

but GDPR's fines

and increased awareness means it's clear you've got to be focused on only collecting what's necessary

and a good benefit if you're selling this to other team members.

Having less personal data means there's less to protect against breach, less risk and less to search for a data subject request.

Okay accuracy.

Personal data you process must be accurate and kept up to date where necessary.

This is the accuracy principle.

This also includes taking every reasonable step to ensure that any inaccurate personal data for those purposes are erased or rectified, corrected without delay.

So this points to a couple of the data subject rights, the right to rectification or to correct incorrect data, and one aspect of the right to erasure.

Accuracy principles don't normally cause much issue.

Now storage limitation.

This principle says that when you have personal data, you should only keep it in a form which permits identification of the data subjects, as in keep it as personal data,

for no longer than necessary for the purposes for which you're processing it, which you've told in the transparency principle.

This is the storage limitation principle, and again there are some research and stats exemptions.

But when you hear the word retention, this is what it relates to.

Not keeping personal data for any longer than necessary for your specified purposes.

Some retention periods are set out in law, like on tax and maternity, paternity records, for example.

But mostly this is about a commercial decision, what's necessary and relevant for your purpose.

But beware, regulators aren't going to accept infinity because you might use it someday.

It's got to be reasonable.

Now, another benefit as well, because you're having appropriate retention periods, you either delete or anonymize that data at the end,

which means again there's less attack surface for risk and breach

and also less to search when you have a data subject request.

However, retention is the area I believe presents the most difficulty in GDPR compliance programs, and it's not just about GDPR's any privacy.

Okay, security.

Now of course at all times personal data must be secure, and GDPR's security principle requires that personal data is processed in a that ensures appropriate security to personal data,

including against unauthorized or unlawful processing and accidental loss, destruction or damage.

You've got to use appropriate technical and organizational measures for security.

Why they call it integrity and confidentiality principle, I don't know.

They should just say security.

Everyone calls it the security principle.

So security is fundamental to privacy, but it's only one of the seven principles.

Most of GDPR is not about security.

Look at our very polemic ISO 27001 is not GDPR video and see what what we mean.

Now the seventh principle, accountability.

If you're a controller, you're responsible for compliance with the other six principles

and to be able to demonstrate compliance with those other six principles.

This seventh principle is the accountability principle and it's the main change the principles brought in by GDPR.

Now although it's number seven you've got to bake this in from the start.

GDPR enshrined data protection by design and by defaulting to law and brought in various obligations on records.

So this accountability principle means you have privacy governance in place focused on GDPR

and you're able to demonstrate that compliance to regulators, but also to the board, auditors, investors, customers and partners.

And now for our bonus tip.

Fantastic.

If you're looking to create privacy governance to cover more than one jurisdiction, it's a good thing to make it principles based.

And then you can tailor it for each jurisdiction's particularities.

Now, GDPR set the standard globally for data protection, copied to various degrees from California to India, from Brazil, Caribbean and China.

And it's not surprising, the seven principles in GDPR are actually all from the Council of Europe's Convention 108 from 1981.

That was the first legally binding international instrument on data protection.

55 signatures including all the EA, the UK, Turkey, Russia and it contains all of these principles.

Right so there we go.

You now know what the seven principles are of GDPR.

100

You know how they drive your compliance and how they can underpin a global program.

101

Please do look at our other Privacy Kitchen videos.

102

I mentioned the 27001 video.

103

We've got a 27701.

104

What is GDPR?

105

10 steps to GDPR compliance, also very popular.

106

Do visit us at Keepable.com, take a demo, and please do use hashtag Privacy Kitchen to tell us the topics you want us to cover.

107

So stay well in the meantime, and we'll see you soon in Privacy Kitchen.

108

Did this video make the topic easy for you?

109

Well, that's what Keepable software is all about, making GDPR compliance a breeze, instantly creating the insights you need to prove your compliance to the board and customers alike.

110

Why not see for yourself by booking your demo at Keepable.com.

111

And while you're there, we have a whole host of content on our blog, including real-life customer stories, insightful posts, and useful downloads.

112

Hit the link in the video description or visit us at Keepable.com.

113

Looking forward to speaking with you soon.

✨ 推荐视频

47 句

本课的词汇与口语要点

这节 B2 级别的口语课以视频“What are the 7 principles of GDPR?”为素材。视频中反复出现的词有：principle, Gdpr, personal, privacy, purpose。这段视频共有 113 个句子、1489 个单词可供跟读。讲话部分时长为 8:00。说话人语速较快，每分钟约 186 个词，会出现较多连读和弱读。只有 80% 的单词属于英语最常用的 3,000 词，词汇难度较高。

视频中的重点词汇

视频中最难的 15 个单词，附发音和释义：

单词	发音	释义
compliance 名词	/kəmˈplaɪ.əns/	遵守, 服從 /服从
limitation 名词	/lɪmɪˈteɪʃən/	限制
retention 名词	/ɹɪˈtɛnʃən/	留用
transparency 名词	/tɹænsˈpæɹənsi/	透明度, 透明性
transparent 形容词	/tɹænsˈpæɹənt/	透明
lawful 形容词	/ˈlɔfl̩/	合法的
incompatible 形容词	/ˌɪŋkəmˈpætɪbəl/	不兼容的, 不相容的
minimization 名词	/ˈmɪn.ɪ.mɪˈzeɪʃən/	最小化
demo 名词	/ˈdɛm.oʊ/	示範 /示范
governance 名词	/ˈɡʌvəɹnəns/	統治 /统治, 治理
insight 名词	/ˈɪnsaɪ̯t/	見地 /见地
demonstrate 动词	/ˈdɛm.ənˌstɹeɪt/	论证
auditor 名词	/ˈɔːdɪtɚ/	審計員 /审计员, 審計師 /审计师
insightful 形容词	/ɪnˈsaɪt.f(ə)l/	深刻, 有見地的 /有见地的
mislead 动词	/mɪsˈliːd/	誤導 /误导

视频中出现的短语动词

单词	释义
look forward to 动词	期待, 向往

视频中的语法

说话人最常用的结构，并附上视频中的原话：

结构	视频中的用法
被动语态 be + 过去分词 — 强调发生了什么，而不是谁做的	must be processed · aren't seen · be focused
现在完成时 have/has + 过去分词 — 过去发生但与现在仍有关联的事	have been · haven't identified · you've told

需要注意的发音

说话人用了 35 次缩略和弱读形式，例如 you're, you've, we'll。请按听到的简短形式来说。

“sh” 和 “zh” 音: limitation /lɪmɪˈteɪʃən/, retention /ɹɪˈtɛnʃən/, minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/, enshrine /ɪnˈʃɹaɪn/, erasure /ɪˈɹeɪʃɚ/
长单词——注意重音位置: limitation /lɪmɪˈteɪʃən/, transparency /tɹænsˈpæɹənsi/, accountability /əˌkaʊn.təˈbɪl.ə.ti/, incompatible /ˌɪŋkəmˈpætɪbəl/, minimization /ˈmɪn.ɪ.mɪˈzeɪʃən/

中文母语者容易读错的音：

/v/ — 不要读成 /w/，上齿轻触下唇: governance /ˈɡʌvəɹnəns/, whichever /wɪt͡ʃˈɛvɚ/, directive /daɪˈɹɛk.tɪv/, turnover /ˈtɝnoʊvɚ/, subjective /səbˈd͡ʒɛktɪv/
词尾辅音 — 要读清楚，后面不要加元音: compliance /kəmˈplaɪ.əns/, transparent /tɹænsˈpæɹənt/, fairness /ˈfɛɚ.nəs/, breach /ˈbɹiːt͡ʃ/, governance /ˈɡʌvəɹnəns/
/r/ 和 /l/ 的区别: regulator /ˈɹɛɡ.ju.leɪ.tɚ/, particularity /pə(ɹ)ˌtɪkjəˈlɛɹəti/, detrimental /ˌdɛtɹɪˈmɛntəl/, organizational /ˌɔː(ɹ)ɡənɪˈzeɪʃənəl/, controller /kənˈtɹoʊlɚ/

如何用这段视频练习

先完整听一遍视频，不要开口，记下不认识的单词。
先用 0.75 倍速逐句跟读，熟练之后再回到正常速度。
录下自己的声音并与原声对比，特别注意 compliance, limitation, retention 这类单词。

什么是跟读法？

跟读法 (Shadowing) 是一种有科学依据的语言学习技巧，最初开发用于专业口译员的培训，并由多语言者Alexander Arguelles博士普及。这个方法简单而强大：您在听英语母语原声的同时立即大声重复——就像是一个延迟1-2秒紧跟说话者的影子。与被动听力或语法练习不同，跟读法强迫您的大脑和口腔肌肉同时处理并模仿真实的讲话模式。研究表明它能显着提高发音准确性，语调，节奏，连读，听力理解和口语流利度——使其成为雅思口语备考和真实英语交流最有效的方法之一。

影子跟读法: 阅读完整分步指南 →

跟读练习: What are the 7 principles of GDPR? - 通过视频学习英语口语

Seven Testing Principles: Software Testing

10 social rules every smart woman should know

How Americans see EU Tech

What is Master Data Management? MDM Explained for Beginners

VEGAN NUTRITION BASICS » the plate method

What ACTUALLY Makes People Buy Things (Pricing Psychology Explained)

AI Governance Explained: Ethical, Transparent & Accountable AI for the Future

How I Would Start Cybersecurity in 2026 (If Starting From Zero)

The Laws of Human Nature by Robert Greene (Detailed Summary)

80% of Interior Design Basics in 10 minutes

Why You Should Create Your Own Principles

Safeguarding ICH (2)