Purpose limitation
The GDPR Article 5(1)(b) principle that personal data collected for one specified, explicit, and legitimate purpose may not later be processed in a way incompatible with that original purpose. Closely related to storage limitation: a dataset repurposed beyond its original justification often loses its retention justification at the same time, since the purpose that justified keeping it has changed without a fresh lawful basis being established.
Defined in 4 GAGE programs, which carry 11 distinct definitions of it. The wording above is taught in AI Data Governance: The Data Chair.
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
The GDPR Article 5(1)(b) principle that personal data collected for one specified, explicit, and legitimate purpose may not later be processed in a way incompatible with that original purpose. Closely related to storage limitation: a dataset repurposed beyond its original justification often loses its retention justification at the same time, since the purpose that justified keeping it has changed without a fresh lawful basis being established.
The PIPL principle that personal information collected for one stated purpose should not, without a new legal basis such as fresh consent, be used for a materially different purpose. Repurposing customer-service data to train a new AI model is a common example of a purpose change that this principle governs.
The privacy principle that personal data collected for one specified purpose may not be freely reused for an unrelated, incompatible purpose. Written into the GDPR at Article 5(1)(b), the CCPA/CPRA at California Civil Code section 1798.100(c), South Korea's PIPA, and most modern privacy regimes.
The privacy principle, codified in GDPR and reflected in other frameworks, that data collected for one stated purpose should not be repurposed for a different, undisclosed purpose without a new, explicit basis.
The GDPR principle (Article 5(1)(b)) requiring that personal data collected for one stated purpose, such as an internal governance interview, not be reused for a different, incompatible purpose, such as a disciplinary case, without a fresh legal basis and, where required, fresh notice to the individual.
Where it is taught
The exact lessons this term appears in. The first 7 topics of every program are free with a free account.
- The interview sweep: what the humans know about the data that the systems do not · The Estate Survey, AI Data Governance: The Data Chair
- Purpose archaeology: what your data was collected FOR versus what it feeds now · Consent, Purpose, and the Law of Data, AI Data Governance: The Data Chair
- The "we have always had this data" trap: age does not launder a dataset · Consent, Purpose, and the Law of Data, AI Data Governance: The Data Chair
- Retention versus the model that memorized: deleting data a model already learned from · Consent, Purpose, and the Law of Data, AI Data Governance: The Data Chair
- Training data governance: what may teach a model, decided before the model exists · Feeding the Machines, AI Data Governance: The Data Chair
- Row, column, and purpose: access that follows the data's sensitivity, not the org chart · Access and the Keys, AI Data Governance: The Data Chair
- The deletion decision: the terabytes your organization should destroy this quarter, defended · The Money of Data, AI Data Governance: The Data Chair
- The map of hidden data workers: everyone in your organization who touches data without the title · The Humans of Data, AI Data Governance: The Data Chair
- Consent archaeology: what this data was collected for versus what you want to do · Data Reality, AI Governance: Applied Mastery
- The provenance file: your data map an auditor could follow · Data Reality, AI Governance: Applied Mastery
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.