Under GDPR, which characteristics must data have?

• A. Used for a Specific Purpose, Relevant, Accurate, and Securely Stored
• B. Used for Any Purpose WithoutRestriction
• C. Publicly Available and Readily Shared
• D. De-Identified and Archived Indefinitely

Answer: (A)

Under GDPR, the way personal data is handled is guided by core processing principles that shape how data is used, stored, and protected. The best option reflects these principles: data should be used for a specific purpose, be relevant to that purpose, be accurate, and be securely stored.

Specific purpose means you define why you’re collecting the data and stick to that purpose (and only extend it with a new lawful basis). Relevance and accuracy mean you keep data that is actually needed for that purpose and keep it correct and up to date. Secure storage covers protecting data from unauthorized access and breaches through appropriate security measures.

The other options miss key protections: using data for any purpose ignores purpose limitation; making data publicly available or easily shared without consent clashes with privacy rights; and keeping data indefinitely, even if de-identified, does not align with storage limits and can raise ongoing privacy concerns.