You are working on a project involving the processing of personal data of EU citizens. According to the principles of data protection and the GDPR framework, which of the following actions best ensures that data is processed in a way that is compatible with the specific purpose for which it was collected?