Which term describes the principle that data usage should be limited to the originally stated purpose?

Which term describes the principle that data usage should be limited to the originally stated purpose?

• A. Data minimization
• B. Purpose limitation
• C. Data retention
• D. Access control

Answer: (B)

This question tests the idea that data should be used only for the purpose stated when it was collected. This is the purpose limitation principle: you set a specific purpose at collection, and any further use should be compatible with that original purpose or require new consent or a lawful basis. This protects individuals from unexpected uses of their data and supports privacy compliance, such as with GDPR. For example, data gathered to process a warranty claim shouldn’t be repurposed for marketing without additional consent. Data minimization is about collecting only what’s needed, data retention is about how long you keep data, and access control is about who can access it. So the term that fits is purpose limitation.

This question tests the idea that data should be used only for the purpose stated when it was collected. This is the purpose limitation principle: you set a specific purpose at collection, and any further use should be compatible with that original purpose or require new consent or a lawful basis. This protects individuals from unexpected uses of their data and supports privacy compliance, such as with GDPR. For example, data gathered to process a warranty claim shouldn’t be repurposed for marketing without additional consent. Data minimization is about collecting only what’s needed, data retention is about how long you keep data, and access control is about who can access it. So the term that fits is purpose limitation.