Purpose limitation
Art. 5(1)(b)
-
Last updated
Mandatory
Catalog reference
Collect personal data only for specified, explicit, legitimate purposes, and don't process it further for a new purpose that's incompatible with the original one. If you want to reuse data for something new, check compatibility first or get a fresh legal basis.
Narrative — how we satisfy this requirement
The records of processing state the purpose of each activity, and engineers may use customer data only for the service the customer ordered.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due