Textbook Key

F: Foundations of Information Privacy and Data Protection

US: U.S. Private-sector Privacy

C: Canadian Privacy

E: European Privacy

G: U.S. Government Privacy

IT: Privacy in Information Technology

M: Privacy Program Management

Find the terms that relate to the program or designation you are studying for by using the tabs below to narrow your search.


Article 6(1)(c) of the Directive sets out the principle of proportionality: Member States shall provide that personal data must be: (c) adequate, relevant and not excessive in relation to the purposes for which they are collected and/ or further processed. Applying the principle of proportionality entails a two-part assessment: (1) whether the means employed by the processing to be evaluated are suitable and reasonably likely to achieve the stated objectives; and (2) whether the adverse consequences that the processing has on an interest worthy of legal protection are justified in view of the importance of the objective pursued.

Reference(s) in IAPP Certification Textbooks: E87-89

Associated law(s): Data Protection Directive