EUGDPRGDPR PrinciplesEASYFree question
The purpose limitation principle requires that personal data be:
- A.Collected for specified, explicit, and legitimate purposes
- B.Stored indefinitely for future use, citing Article 4(1)'s definition of personal data, which excludes any information that has been pseudonymised
- C.Collected in the largest possible quantity, citing Article 6(1)(a) consent, which remains valid indefinitely even after the data subject withdraws it
- D.Shared with all business partners
Why A is correct
Purpose limitation means data must be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
Know someone studying for GDPR? Send them this one.