Data Collection · Consent and basis · Component
The purpose
What it was collected for, which constrains what it may be used for — because the useful new analysis is frequently the one that would breach it.
The deliverable
What it is
Purpose limitation is the constraint that bites operationally. Data collected to deliver a service cannot simply be used to train a model or to target advertising.
It also constrains collection: data collected because it might be useful has no stated purpose and therefore no basis.
One level in
What it is made of
Each element is a constituent part of the component. Follow one to see the attributes it carries.
The stated purpose
What the data was collected to do.
3 attributes: Purpose · Specific · As told to people
LearnThe new uses
Uses proposed after collection.
3 attributes: Proposed use · Compatible · What would be needed
LearnThe minimisation
Whether more is collected than the purpose requires.
3 attributes: Field · Required for purpose · Ever used
Learn
“To improve our services” excludes nothing and is therefore not a purpose.
The other components in consent and basis
The basis
What entitles the organisation to hold each data set — recorded per set, because each basis has different consequences.
LearnThe notice
What people were told, and whether practice still matches it — because the notice is a commitment regardless of who reads it.
Learn