1. Personal data shall be: [...] (b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes ('purpose limitation'); [...] (e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject ('storage limitation');
How this was checked
GDPR purpose limitation and storage limitation
Verified · last checked Settled, with the evidence a claim at this level needs.
Under the GDPR, personal data must be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes, and must be kept in a form which permits identification of the people concerned for no longer than is necessary for the purposes for which they are processed, each subject to stated exceptions for archiving in the public interest, scientific or historical research and statistics.
At a glance
The statement laid out, in its own words. The statement above and its sources are what count.
Purpose limitation, Article 5(1)(b)
- Collected for specified, explicit and legitimate purposes
- Not further processed in a manner incompatible with those purposes
Storage limitation, Article 5(1)(e)
- Kept in a form which permits identification for no longer than necessary for the purposes
Exceptions in both points
- Archiving in the public interest, scientific or historical research, statistics, under Article 89(1)
Where the book relies on it
- The AI Act at Work: Hiring and Managing People with AI, What to ask the vendor, and what an answer looks like. About The AI Act at Work: Hiring and Managing People with AI
- The AI Act at Work: Hiring and Managing People with AI, The oversight log, and the system's own logs. About The AI Act at Work: Hiring and Managing People with AI
- Kind of evidence
- documentarySettled by a first-hand source, quoted below with the day it was read.
The evidence
Every sentence in our books that makes a claim about the world points at a page like this one.