Draft Data Protection and Privacy Policy – The Gambia. May 2019 OUTLINE 1. Introduction 2. Purpose 3. Objective 4. Scope 5. Basic Principles for the Protection of Personal Data 5.1 Fair, Transparent, Lawful Processing 5.2 Specific Legitimate Purpose and Purpose Limitation 5.3 Data Minimisation 5.4 Accuracy 5.5 Storage Limitation 5.6 Data Security 5.7 Accountability 6. Legitimate Basis 7. Special Categories of Personal Data 8. Data Protection by Design and Default 9. Transborder Data Flows 10. Rights of Data Subjects 11. Exceptions 12. Establish a Supervisory Authority 13. Definitions 1