A privacy principle (FIPP) that addresses an organization's notice to individuals regarding the specific purpose for which PII is collected and restricting an organization's use, processing, storage, maintenance, dissemination, or disclosure of PII for a purpose that is explained in the notice and is compatible with the purpose for which the PII was collected, or that is otherwise legally authorized.
Sources:
CNSSI 4009-2022
from
OMB Circular A-130 (2016) - adapted