The purpose limitation principle requires that data collected by an organization be relevant and necessary to the specific, stated purpose of the collection (e.g., providing a service). A cellular provider's purpose is to deliver phone and data connectivity services; asking about the spending habits of household occupants is unrelated to that purpose and represents excessive or out-of-scope data collection, violating the intended purpose principle. In contrast, a grocery delivery service collecting a home address and an organization verifying a billing address tied to a credit card are both directly necessary and relevant to fulfilling their respective services.
Community Discussion