According to the EU Data Protection Directive, processing of personal data must meet two specific requirements; fairness and lawfulness. Lawfulness suggests a community-wide set of norms enforceable by the intervention of the state. In order to be lawful, processing must meet all legal requirements.
Reference(s) in IAPP Certification Textbooks: E83-85
Associated term(s): Fairness
Associated law(s): Data Protection Directive