The Purpose or Reason for Processing
The Purpose or Reason for Processing
The purpose limitation principle of the GDPR requires that the processing of personal data is associated with and limited a specific, stated reason or purpose. You must always be able to identify and apply a specific lawful basis for processing personal data.
The legislation also mandates that individuals are always made aware of the purpose(s) for the collection and use of their personal data. This is done through the dissemination of privacy notices.
The purpose for which student personal data is processed is detailed student privacy notice. The processing of staff data is covered in the staff personal data.