Section 1: "everyone has the right to the protection of personal data concerning him or her." translates to EU citizens:
1. have a right to know all data an organization has on them at any moment in time.
2. can request the organization delete all information and the organization must comply.
3. has reasonable expectation of privacy for that data, therefore organization's data must be secure.