Article 5(1)(b) of the GDPR states that personal data must be “collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.” Based on Article 5(1)(b), what is the impact of a member state’s interpretation of the word “incompatible”?
Article 5(1)(b) of the GDPR specifically addresses the principle of purpose limitation, meaning that personal data should only be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes. The interpretation of the term 'incompatible' by a member state would indeed indicate the degree of flexibility a controller has in using personal data in ways that may vary from its original intended purpose. Thus, it determines how strictly controllers must adhere to the original purpose for which the data was collected, making option D the most accurate.
d is wrong because the GDPR tries to prevent that Controllers us the data for anything other then the specified purpose. Check clause 5 GDPR. So C is the answer.
If you want to process data for another purpose then afgreed on, this new purpose has first to be agreed on before processing the data according to that new purpose