A team skips a further-processing compatibility assessment because the new use sits in the ‘same database’ as the original collection. Is that reasoning sound under purpose limitation?
Select an answer to reveal the explanation.
Short Explanation
Same filing cabinet does not mean same job. Purpose limitation cares about why you collected the data and whether the new use fits—not which server shelf they share. Skipping the compatibility check because ‘it is already in the database’ is wishful thinking.
Full Explanation
Purpose limitation requires that further processing be compatible with the original purposes or otherwise justified (for example by a new lawful basis and transparency). Compatibility analysis looks at factors such as link to original purposes, context, nature of the data, consequences for data subjects, and safeguards—not merely co-location in the same database. Assuming compatibility from shared storage alone is incorrect.