1. Take data protection into account from the start and in all circumstances

Data protection should be the first consideration in all processing of personal data in hobby activities and should be automatically taken into account whenever processing is begun or processing practices change.

Data protection principles must be effectively integrated into all stages of all functions involving the processing of personal data. The hobby organiser must take the necessary measures to ensure and demonstrate compliance with data protection legislation. Such measures can include training, instructions and orders for employees, surveillance of premises, monitoring of the use of personal data, ensuring the security of information systems, encryption of data, technical restrictions, and audit and surveillance systems.