FACEBOOK, CAMBRIDGE ANALYTICA AND GDPRR’S PURPOSE LIMITATION PRINCIPLE
Facebook’s PR nightmare following the recent Cambridge Analytica scandal shows no signs of abating. The EU Security Commissioner has just indicated that Brussels is prepared to regulate social media companies if they don’t quickly tackle head-on the mishandling of personal data that the Cambridge Analytica story appears to have exposed. We have already discussed why the Facebook/Cambridge Analytica story matters in the context of GDPR . Crucially it has moved the whole issue of data protection to the top of the political and media agenda. Most of the commentary has centred on the issue of consent. But as we watch the story develop we think it also raises important points about another key data protection rule: the principle of purpose limitation.