The 7 GDPR Principles (Article 5) Explained with Examples

The Seven Principles (Article 5(1)(a–f))

Accountability (Article 5(2))

Accountability is not a eighth “soft” principle — it is the duty to demonstrate that 5(1) is met. Typical artefacts: RoPA (Art 30), policies, DPIAs (Art 35), DPAs (Art 28), training records, and audit trails for DSARs and breaches.

How CyberSilo Helps

• CSA maps processing activities and evidence to Article 5 themes
• ThreatHawk supports integrity/confidentiality evidence via continuous logging
• Programme coaching for RoPA, DPIA, and rights workflows — not legal advice

Frequently Asked Questions

How many GDPR principles are there?

Seven in Article 5(1)(a–f), plus accountability in Article 5(2).

Is accountability a separate principle?

Article 5(2) requires the controller to be able to demonstrate compliance with 5(1). It is commonly taught alongside the seven principles.

Which fine tier applies to Article 5 breaches?

Infringements of the basic principles often fall under the higher Article 83 tier — up to €20M or 4% of worldwide annual turnover, whichever is higher.

Related GDPR Resources

GDPR hub · Lawful basis · Article 32 · Fines · CSA