Controllers should also implement mechanisms to ensure that personal data is not processed .
Necessary for each specific purpose .
Controllers should also implement mechanisms to ensure that personal data is not processed unless necessary for each specific purpose .