GDPR Article 5(1)(b): purpose limitation (Regulation (EU) 2016/679, Art 5(1)(b))
Records collected for one purpose (running a service, answering a customer) may not be reused in a way that is incompatible with it. Licensing them to an AI buyer is a new purpose that has to pass this test, and the research wording in the same sentence is the only exception the text itself gives.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes”
Where it was read
Also read from the same source
- GDPR Article 6(1)(f): legitimate interests as a lawful basis (Regulation (EU) 2016/679, Art 6(1)(f))
- GDPR Article 6(4): compatibility test for a new purpose (Regulation (EU) 2016/679, Art 6(4))
- GDPR Recital 50: further processing and the legal basis (Regulation (EU) 2016/679, recital 50)
- GDPR Article 9(1): special categories of personal data (Regulation (EU) 2016/679, Art 9(1))
- GDPR Article 13(3): telling people before a new purpose (Regulation (EU) 2016/679, Art 13(3))
- GDPR Article 14(5)(b): disproportionate effort (Regulation (EU) 2016/679, Art 14(5)(b))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide