✓
Purpose limitation
Collect and use data only for documented, lawful campaign purposes.
Campaign data is sensitive. IEMS should be configured with clear purpose, authority, minimisation, retention and security controls.
Collect and use data only for documented, lawful campaign purposes.
Store only information genuinely required for authorised operations.
Limit data by role, geography and job responsibility.
Maintain processes to validate, update and correct records.
Define retention schedules and securely remove data when no longer required.
Use approvals, logs, incident response and periodic access reviews.
Explore how these GIEMS concepts are implemented in the working campaign operations platform.