Purposes #12
Description
Purposes
The processing of personal data is closely linked to purposes. For it to be legitimate, it must comply with the purpose limitation principle.
The necessary processing purposes are defined by the controller or the Union or its Member States. Further processing that is incompatible with the specified purposes is not permitted. Exceptions are formulated in Art. 89 para. 1 GDPR.
In addition, the principle defines further requirements such as storage duration and the like and forms the basis for the decision on the adequacy and relevance of the processing. This means that the personal data collected must be adequate, relevant and limited to what is necessary in relation to the purpose for which it is processed.
However, not only must processing purposes be defined, but each of these purposes must be covered by the legal basis and accordingly be based on a legality fact. Consent as a form of legal basis can only be given for previously defined purposes and applies exclusively to these consented purposes.
In order to comply with the information obligation, the purposes must already be defined before processing.
There are no specifications for the degree of precision of the purpose definition, but the data subject must be able to understand the purposes for which their data is being collected.
If there is a change of purpose, the compatibility with the purpose of collection must be checked. A change of purpose is only exempt from the principle of purpose limitation if it has been agreed to in a consent form, if it is permitted by a legal provision or if it is for publicly interesting archive purposes, scientific or historical research purposes or statistical purposes. Research purposes or stat. purposes become relevant. If there is no such exception, the controller can only collect the data again with a changed purpose.
Related Comments
Based On
Art. 5 Para. 1 lit. b
Art. 5 Para. 1 lit. c
Art. 5 Para. 1 lit. e
Art. 6 Para. 1 SubPara. 1
Art. 6 Para. 4
Comm. Art. 6 Para. 1 Rn. 24
References
Purpose
Purpose Limitation
Data Minimization
Accuracy
Obligation to Inform
Legality Facts
Purpose of Collection
Art. 89 Para. 1