formålsbegrensning

Formålsbegrensning is a legal principle primarily found in data protection law, originating from European Union legislation. It dictates that personal data collected for a specific purpose should not be processed for any other incompatible purpose without the data subject's consent or a legal basis. This means an organization cannot collect data for one reason and then decide to use it for an entirely different, unrelated reason later without adhering to specific rules.

The core idea behind formålsbegrensning is to protect individuals' privacy and prevent the misuse or unauthorized expansion of their personal data. It ensures transparency and control for the data subject, as they are informed about why their data is being collected and for what it will be used. When an organization wishes to process data for a new purpose, it must assess whether this new purpose is compatible with the original one. If it is not, then further processing is generally prohibited unless specific conditions are met, such as obtaining explicit consent from the individual whose data is involved.

This principle is a cornerstone of data protection regulations like the General Data Protection Regulation (GDPR) in the EU. It applies to all types of personal data and across various sectors where data is processed. The principle encourages organizations to be mindful of data usage and to only collect what is necessary for the stated purpose.