The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Purpose limitation

Your organisation proactively takes steps to only share necessary personal data with processors or other third parties.

Ways to meet our expectations:

  • Your organisation only shares the personal data necessary to achieve its specific purpose.
  • When information is shared, it is pseudonymised or minimised wherever possible. You also consider anonymisation so that the information is no longer personal data.

Can you answer yes to the following questions?

  • Do staff understand what they should consider when sharing data to make sure it is limited appropriately?