thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Purpose Limitation

Principle that personal data be collected for specified, explicit, legitimate purposes and not further processed incompatibly.

Definition

Under GDPR, new uses must be compatible with the original purpose, considering the link between purposes, context, nature of data, consequences, and safeguards, or else require a new lawful basis. Archiving, research, and statistical purposes are presumed compatible with safeguards. Purpose limitation is a key constraint on reusing data for AI training.

Example

Using customer support transcripts to train a marketing model requires a compatibility assessment or new basis.

Exam tip

Purpose limitation questions often involve repurposing existing data.

Related terms