Article 11
1. Personal data shall be processed only to the extent that, in view of the purposes for which they were gathered or were then processed, they are adequate, serve the relevant purpose and are not excessive.
2. The responsible party shall take the necessary measures to ensure that personal data, in view of the purposes for which they were gathered or were then processed, are correct and accurate.