Purpose limitation
Art. 5(1)(b)
-
Last updated
Mandatory
Catalog reference
Collect personal data only for specified, explicit, legitimate purposes, and don't process it further for a new purpose that's incompatible with the original one. If you want to reuse data for something new, check compatibility first or get a fresh legal basis.
Narrative — how we satisfy this requirement
The records of processing state the purpose of each activity, and engineers may use customer data only for the service the customer ordered.
- TSK-0069 by Sam de Vries