Which of the following is an example of a violation of the intended purpose for data collection?
The purpose limitation principle requires that data collected by an organization be relevant and necessary to the specific, stated purpose of the collection (e.g., providing a service). A cellular provider's purpose is to deliver phone and data connectivity services; asking about the spending habits of household occupants is unrelated to that purpose and represents excessive or out-of-scope data collection, violating the intended purpose principle. In contrast, a grocery delivery service collecting a home address and an organization verifying a billing address tied to a credit card are both directly necessary and relevant to fulfilling their respective services.
Community Discussion