Change of purpose
[ch 3: page 23]Where the controller intends to further process the personal data for a purpose other than that for which the personal data was collected, the controller must provide the data subject with information on that other purpose and any other relevant information before that further processing takes place.