Language:
Login
Book a Demo
Back to Learn
  • Practical Compliance Fundamentals

Purpose Limitation: Using Data Only for What You Said

1 MIN READ

Purpose limitation sounds abstract until you see it applied to a real example — one the Act itself uses to illustrate the point.

A WORKED EXAMPLE

THE APP

A telemedicine service

It asks for medical details to provide a consultation — a clear, specific, necessary purpose.

THE OVER-ASK

Also requests your contact list

Not needed to deliver a telemedicine consultation at all..

THE LIMIT

Consent doesn't stretch to cover it

Agreeing to the medical processing doesn’t imply agreeing to the contact-list access too.
That’s purpose limitation in one sentence: consent is scoped to what was actually asked for, and it doesn’t quietly expand to cover whatever else an organisation later decides would be useful. If a new use comes up, that’s a new purpose — and it needs its own basis, not a stretch of the old one.
Purpose limitation means treating every new use of data as a new question, not an extension of the last answer.

NEXT —

Data Principal Rights in Practice: Access, Correction and Erasure

SOURCES  The DPDP Act, 2023 — official text, MeitY — https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf 

Ready to get compliant?

Talk to our team or register your organisation to get started with ConveyGrid.

Register Organisation
Talk to Our Team
Privacy Overview

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site.

We also use third-party cookies that help us analyse how you use this website, store your preferences, and provide the content and advertisements that are relevant to you. These cookies will only be stored in your browser with your prior consent.

You can choose to enable or disable some or all of these cookies but disabling some of them may affect your browsing experience.

Necessary

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Analytics

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Marketing

Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.