General Data Protection Regulation, Regulation 2016/679
The legal backdrop to the chapter’s discussion of personal data: collection must have a lawful basis, a stated purpose and limits that do not vanish because a system can infer more.
Cited in
General Data Protection Regulation, Regulation (EU) 2016/679. (Referenced generally in discussion of data protection principles)