Purpose limitation
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
Purpose limitation
Your organisation proactively takes steps to only share necessary personal data with processors or other third parties.
Ways to meet our expectations:
- Your organisation only shares the personal data necessary to achieve its specific purpose.
- When information is shared, it is pseudonymised or minimised wherever possible. You also consider anonymisation so that the information is no longer personal data.
Can you answer yes to the following questions?
- Do staff understand what they should consider when sharing data to make sure it is limited appropriately?