Set by the law · GDPR Art. 6(4)
Compatible further processing
In plain English
Using personal data for a new purpose is allowed only if it is compatible with the original one. The controller weighs the link between the purposes, the context, the kind of data, the consequences and the safeguards.
The official text
the controller shall, in order to ascertain whether processing for another purpose is compatible with the purpose for which the personal data are initially collected, take into account, inter alia: (a) any link between the purposes for which the personal data have been collected and the purposes of the intended further processing; (b) the context in which the personal data have been collected, … (c) the nature of the personal data, … (d) the possible consequences of the intended further processing for data subjects; (e) the existence of appropriate safeguards, which may include encryption or pseudonymisation
The processing of personal data for purposes other than those for which the personal data were initially collected should be allowed only where the processing is compatible with the purposes for which the personal data were initially collected.
1,591 decisions on Fino cite Article 6 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.