Purpose specification and use limitation

{
  "id": "MLC-T-CYB-003382",
  "term": "Purpose specification and use limitation",
  "field": "Cybersecurity",
  "definition": "A privacy principle (FIPP) that addresses an organization's notice to individuals regarding the specific purpose for which PII is collected and restricting an organization's use, processing, storage, maintenance, dissemination, or disclosure of PII for a purpose that is explained in the notice and is compatible with the purpose for which the PII was collected, or that is otherwise legally authorized.",
  "references": [
    "CNSSI 4009-2022 from OMB Circular A-130 (2016) (adapted)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/purpose-specification-and-use-limitation/"
}