ABSTRACT
The following key elements can be extracted from the text of the second data
protection principle:
• personal data must be obtained for specific purposes;
• all purposes for which personal data is processed must be lawful; and
• all processing of personal data must relate to the original purpose or purposes for which it was obtained.
