9. Lawfulness of processing
10. Minimality
11. Consent, justification and objection
12. Collection directly from data subject