Principle 3. Purpose Specification

  • Collected for a specific and explicitly defined and lawful purpose – related to the activity or function of the responsible party
  • Take steps to ensure that the subject is aware of the data collection
  • Records must not be detained for longer than necessary