formålsbegrensing

Formålsbegrensing is a legal principle that restricts the use of personal data to the specific purposes for which it was collected. This means that an organization or individual collecting data cannot later use that data for entirely different, unrelated purposes without obtaining new consent or having a separate legal basis. The principle is fundamental to data protection and privacy regulations worldwide, including the General Data Protection Regulation (GDPR) in Europe.

The core idea behind formålsbegrensing is to ensure transparency and control for individuals regarding their personal information. When data is collected, the purposes for its processing must be clearly stated. This allows individuals to make informed decisions about whether to share their data and understand how it will be handled. If an organization wishes to process data for a new purpose, it generally needs to inform the data subject and obtain their consent or establish another valid legal ground for the new processing activity.

This principle helps prevent the misuse or unauthorized expansion of data usage. It acts as a safeguard against "function creep," where data initially collected for a legitimate and limited purpose is gradually expanded for use in other, often less transparent, ways. Formålsbegrensing contributes to building trust between data controllers and data subjects by setting clear boundaries on data processing activities.