Marketing and advertising use

The organization should not use PII processed under a contract for the purposes of marketing and advertising without prior consent from the appropriate PII principal. The... ... - Licensed content not shown -

GDPR (EU)

7.4: Article(7)(4): When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract.

LGPD (BRA)

Art.39: The processor must carry out the processing of the data in accordance with the instructions provided by the controller, which will verify the observance of these instructions and rules on the matter.

APP (Australian Privacy Principles)

APP.7: Unless an exception (e.g. consent) applies, must not use or disclose personal information for direct marketing (APP 7)

PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada

4.5: Personal information must not be used or disclosed for other than the purposes for which it was collected, except with the consent of the individual...

Personal Data (Privacy) Ordinance - Hong Kong

S.35E: Must not use personal data for marketing without data subject's consent (S.35E)

Personal Data Protection Act - Singapore

S.18: Collection, use and/or disclosure of personal data must be reasonable in the circumstances and the individual must be informed of the purposes for collection, use and disclosure

Personal Information Protection Act - South Korea

A.19: A recipient of personal information cannot use it or disclose it for any other purpose, except as permitted for by law or where additional consent is provided by the individual

Turkish Data Protection Law numbered 6698

A.4.2: Personal data may only be processed; (i) for specific, explicit and legitimate purposes, (ii) being relevant with, limited to and proportionate to the puposes for which they are processed. Data processing must be relevant, limited and proportionate to the purposes for which data is to be processed (A.4.2) Personal data processed must be accurate and if necessary, up to date (A.4.2)

A.12.4: The controllers and processors shall not disclose the personal data that they learned to anyone in breach of this Law, neither shall they use such data for purposes other than processing. This obligation shall continue even after the end of their term.