Under

GDPR’s "Purpose Limitation" principle, when can an organization reuse

collected personal data for a new purpose?

A)

Only if the new purpose is more profitable than the original one.

B) If

the data is anonymized first, regardless of the original purpose.

C) If

the new purpose is compatible with the original purpose or new consent is

obtained.

D)

After 1 year has passed since the original data collection.

E)

Only if the organization is a government entity.