Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Data Analytics

A Mumbai-based retailer collects customers' purchase histories and wants to run analytics on them. Under the data protection principle of purpose limitation, which action is correct?

The retailer should use the data only for the purposes the customer consented to and seek fresh consent for any new purpose. Purpose limitation ties processing to the stated purpose, so merely holding the data does not permit unlimited reuse.

  1. AUse the data for analytics only for the purposes for which the customer gave consent, and seek fresh consent for a new purposeCorrect
  2. BUse the data for any new analytics purpose because the data is already in the company's database
  3. CShare the data with any third party once the customer has made a purchase
  4. DRetain the data indefinitely because analytics improves with more data

Explanation

Purpose limitation means personal data may be processed only for the purpose for which consent or a lawful ground was given. A new purpose needs fresh consent or another lawful basis. Possessing the data does not authorise unlimited reuse, so the second option is wrong.

Did you get it right without looking?

One question tells you little. A timed set on Data Analytics shows your real accuracy, how long you take and where you lose marks.

More Data Analytics questions