Purpose limitation: Under core data protection principles applied to AI, which principle most directly governs
Purpose limitation governs whether data gathered for one purpose can be reused to train an AI model for a different purpose.
The question
A retailer collected customer data to process orders and now wants to reuse that same data to train a new AI product-recommendation model. Under core data protection principles applied to AI, which principle most directly governs whether this reuse is permissible?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Data minimization, which limits how many customer records the retailer may collect and hold in storagePlausible but wrong: minimization limits how much data is collected, not whether a new incompatible purpose is allowed.
- Purpose limitation, which restricts using data for new purposes incompatible with the original one ✓Correct: purpose limitation governs whether data collected for one purpose may be reused for a different, incompatible purpose.
- Storage limitation, which caps how long the retailer may keep the collected order data on filePlausible but wrong: storage limitation addresses retention duration, not compatibility of a new use.
- Accuracy, which requires the retailer to keep the customer records correct and up to datePlausible but wrong: accuracy concerns data quality, not the legitimacy of repurposing data for AI training.
The trap
Assuming data minimization, not purpose limitation, governs repurposing data for a new AI use. How to remember it
Purpose limitation governs whether data gathered for one purpose can be reused to train an AI model for a different purpose.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Privacy by design paired with data minimization: Which pair of data protection concepts best matches this →
- Conducting a data protection impact assessment to evaluate: Before deployment, which controller obligation is →
- It is treated as a special category warranting heightened: Compared with ordinary personal data, how do data →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.