A university lecturer asks which GDPR principle is violated when an AI system trained on HR data for performance reviews is repurposed to predict employee health conditions without additional legal basis.

• A.Data minimization (Article 5(1)(c)) - the system processes too much data for health prediction
• B.Storage limitation (Article 5(1)(e)) - the HR data has been retained beyond its original purpose retention period
• C.Purpose limitation (Article 5(1)(b)) - data collected for performance review cannot be repurposed for health prediction without a separate compatible purpose assessment and new legal basis
• D.Accuracy (Article 5(1)(d)) - health predictions from HR data are likely inaccurate, since the right to erasure exempts trained models