Under the Data Protection Act 2018, personal data must be obtained for what purposes?

Under the Data Protection Act 2018, personal data must be obtained for what purposes?

• A. Specified, explicit and legitimate purposes
• B. Data must be encrypted at all times
• C. Data can be used for any purpose without notice
• D. Data should be stored in local memory

Answer: (A)

Purpose limitation is the key idea. Under the Data Protection Act 2018 (UK GDPR), personal data should be collected only for specified, explicit and legitimate purposes. This ensures there’s a clear reason for collecting the data and prevents it from being used for unrelated activities without proper justification or consent. The other statements aren’t about the purposes for which data is collected: encryption is a security measure, not a requirement about why data is gathered; using data for any purpose without notice breaks the purpose limitation rule; and storing data locally concerns where data is stored, not the reason it’s collected.

Purpose limitation is the key idea. Under the Data Protection Act 2018 (UK GDPR), personal data should be collected only for specified, explicit and legitimate purposes. This ensures there’s a clear reason for collecting the data and prevents it from being used for unrelated activities without proper justification or consent. The other statements aren’t about the purposes for which data is collected: encryption is a security measure, not a requirement about why data is gathered; using data for any purpose without notice breaks the purpose limitation rule; and storing data locally concerns where data is stored, not the reason it’s collected.