PDPA Series: Purpose Limitation
16355
post-template-default,single,single-post,postid-16355,single-format-standard,bridge-core-2.6.0,,qode-title-hidden,qode_grid_1300,qode_popup_menu_push_text_top,qode-content-sidebar-responsive,qode-theme-ver-24.5,qode-theme-bridge,disabled_footer_bottom,wpb-js-composer js-comp-ver-6.5.0,vc_responsive,elementor-default,elementor-kit-20372

25 Sep PDPA Series: Purpose Limitation

Posted at 04:17h in PDPA by

PURPOSE LIMITATION
Only Collect, Use or disclose an individual’s personal database based on the specific purpose they have given consent for.

  • Collect personal data only to the extent that is necessary and reasonable for legitimate business purposes.
  • Organisations will need to obtain fresh consent if the purpose has changed.
  • When collecting personal data, always indicate which information is optional/required.


Case Study 1: Excessive use of CCTV in Nursing Home

In Ireland, there was a complaint against a nursing home which installed CCTV cameras in corridors, day room, kitchen, front entrance, staff room, residents’ dining room, games room and drug therapy room. Concerns were raised that the CCTV system was linked to the owner’s smart phone, allowing the cameras to be checked remotely.

Case Study 2: Excessive disclosure for unreasonable purposes

In Singapore, there was an insurance company who disclosed bank account details of an insurance policy holder to a medical clinic that was not for a reasonable purpose. The bank account details were displayed on the same claim form and visible to the medical clinic. The bank account details were not relevant for the latter at all.

You can read the full Purpose Limitation from PDPC.

Print page
1 Like