Purpose limitation
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Purpose limitation - Data collected for a specified purpose may not be further processed in an incompatible way; a compatibility test governs further use.
In the CIPP/E body of knowledge, Purpose limitation comes up under Ch 6.3 - Purpose limitation; IAPP Training · Module 4 - BoK III.B.
Purpose limitation in context
- [[Purpose limitation]] means data must be collected for ==specified, explicit and legitimate purposes== and not further processed in a way ==incompatible== with those purposes. (Purpose limitation)
- This topic also drills the most-tested skill: ==telling the principles apart== - purpose limitation (why), data minimisation (how much), storage limitation (how long), accuracy (correctness), and integrity and confidentiality (security). (Accountability and telling the principles apart)
- The GDPR's [[Article 5]] principles - ==lawfulness, fairness and transparency==, ==purpose limitation==, ==data minimisation==, ==accuracy==, ==storage limitation==, ==integrity and confidentiality== and ==accountability== - sit on top of the eight [[OECD principles]]. (Module 4 · Data processing principles (OECD + Article 5))
Where Purpose limitation is covered in the CIPP/E study notes
Related terms
- Compatible further processing
- Compatibility test
- Article 5
- OECD principles
- Data minimisation
- Storage limitation
Test yourself on Purpose limitation
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.