Nurses must handle patient data in accordance with GDPR principles. This involves:
Lawfulness, fairness, and transparency: Data must be processed lawfully, fairly, and transparently. Purpose limitation: Data must be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. Data minimization: Only the necessary data for the intended purpose should be collected. Accuracy: Data must be accurate and kept up to date. Storage limitation: Data should be kept only as long as necessary for the purposes for which it is processed. Integrity and confidentiality: Data must be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.