In what circumstances can personal data be collected, stored and processed in Belgium? Thomas Daenens and Steven De Schrijver from Astrea discuss how the collection of personal data must be transparent, the person wishing to collect the data must clearly state the exact purpose for which the data will be collected and the data controller cannot obtain more data than is required for that purpose; the limits or restrictions on the period for which an organization may (or must) retain records; and more.