P3.1 - Personal Information Collected for Identified Purposes

P3.1 requires an organization to limit the collection of personal information to data needed for specific, documented purposes that are communicated to individuals. It mandates that the purposes be identified, legitimate, and aligned with the organization's services, and that the collection be proportional to those purposes. This supports transparency and helps prevent unnecessary or unrelated data gathering.