A city collected festival ticket emails solely for entry control, then reuses them to build a political-donation lookalike model without a compatible further-processing analysis. Which processing principle is primarily at risk?
Select an answer to reveal the explanation.
Short Explanation
You bought a festival ticket so the door staff could let you in—not so City Hall could model your politics. Purpose limitation is that handshake: collect for a clear job, do not silently pivot to an incompatible one. Entry-control emails into a donation lookalike is a classic purpose drift.
Full Explanation
Article 5(1)(b) requires that personal data be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. Reusing festival entry-control emails for a political-donation lookalike model is a further purpose that requires compatibility assessment (or a new lawful basis and transparency), not an automatic reuse because the same contact field sits in a database.