The principle of purpose limitation means, on the one hand, that data may not be collected without a purpose, i.e. retained. On the other hand, a purpose of data collection once communicated to the data subject at the time of collection may not be changed without the consent of the data subject or a corresponding legal basis. This means in particular that data may not be misused for other purposes.