CJEU clarifies GDPR principles of purpose limitation and storage limitation
The purpose limitation principle does not preclude a controller from capturing and storing in a test database established for testing and error correction purposes personal data previously collected and stored in another database. However, such "further processing" of personal data must be compatible with the specific purposes for which the personal data were originally collected. The principle of storage limitation precludes the retention of personal data in that test database for longer than necessary to conduct those tests and correct those errors. That is the EU Court's answer to questions raised by a Hungarian court.