All RE5 questions
POPIA Data Protection
An FSP wants to use client contact details collected for policy administration to run an unrelated marketing campaign. What does POPIA's purpose-limitation principle require?
RE5 practice question with a worked answer. This is one of hundreds of FSCA RE5 questions in the RegulatoryExams question bank.
- a) Purpose limitation only applies to medical data, not contact details.
- b) Marketing is always exempt from POPIA, so no basis is needed.
- c) Information collected for one purpose should not be further processed for an incompatible purpose without a lawful basis such as consent.Correct
- d) Any data, once collected, may be used for any purpose the FSP later thinks of.
Why this is the answer
POPIA's purpose-specification and further-processing-limitation conditions mean data collected for one purpose cannot simply be repurposed for an incompatible use; a lawful basis (e.g. consent or a compatible purpose) is required first.
Want to test yourself on 700+ more questions like this?
Start your free RE5 simulator today — timed mock exams, full answer explanations and cloud-synced progress tracking.
More POPIA questions
- In handling client personal information, an FSP acts as a 'responsible party' under POP…
- Under POPIA, a data subject (the client) generally has which right regarding their pers…
- Under POPIA, an FSP suffers a security compromise that exposes clients' personal inform…
- Under POPIA, what is the lawful basis most commonly relied on to send a client direct m…