The purpose or reason for processing
The purpose limitation principle of data protection legislation requires that the processing of personal data is associated with and limited to specific, stated reason(s).
- You must always be able to identify and apply a specific lawful basis for processing personal data.
Data protection legislation also mandates that individuals are made aware of the purpose(s) for the collection and use of their personal data. This is done through the dissemination of privacy notices. Individuals must be presented with a privacy notice before any processing takes place.
- The purpose for which UofG student personal data is processed is detailed in the student privacy notice
- The processing of UofG staff data is covered in the staff privacy notice