62To that end, Chapter II of Directive 95/46 and Chapters II and III of the GDPR set out the principles governing the processing of personal data and the rights of the data subject which the processing must observe. In particular, all processing of personal data was required, before the GDPR was applicable, to comply with the principles relating to data quality and the criteria for making data processing legitimate set out in Articles 6 and 7 of that directive and, once the GDPR was applicable, to comply with the principles relating to processing of data and the conditions governing lawfulness of processing listed in Articles 5 and 6 of that regulation (see, to that effect, judgments of 22 June 2021, Latvijas Republikas Saeima (Penalty points), C‑439/19, EU:C:2021:504, paragraph 96, and of 24 February 2022, Valsts ieņēmumu dienests (Processing of personal data for tax purposes), C‑175/20, EU:C:2022:124, paragraph 50).
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.