Drone exam · Privacy and data protection

A contractor says they want to keep every image from a town centre survey because it 'might be useful later.' What privacy principle is missing from that plan?

Answer

The processing needs a defined, legitimate purpose rather than indefinite collection for unknown future uses. The team should state what the data is needed for and collect accordingly.

Explanation

Purpose limitation makes later decisions about collection, sharing, retention, and deletion more concrete. 'Maybe useful' is too vague to guide responsible processing.