Explains purpose limitation, minimisation and storage limitation
GDPR Art. 5(1)(b), (c), (e) and the compatibility test for further use (Art. 6(4)).
Can AI do this?
AI does this well Most of the tested AI models master this. 4 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 100% | Mastered |
| gemini-3.5-flash-lite | Low cost | 100% | Mastered |
| gpt-6-luna | Low cost | 100% | Mastered |
| claude-haiku-5-5 | Low cost | 100% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: GDPR Art. 5(1)(b), (c), (e) and the compatibility test for further use (Art. 6(4)).
How it is assessed: Answers a written question on the processing principles correctly
Related knobits
Needed for
- N-501 Recognises a sharing purpose missing or wider than the data
- N-502 Recognises onward use left open in a sharing agreement
- N-531 Minimises shared data to the agreement's purpose
- O-251 Explains protecting production data in test environments
- S-402 Recognises a purpose wide enough to allow anything
- S-403 Recognises data beyond what the purpose requires
- S-404 Recognises retention longer than the purpose
- S-408 Recognises further use with no compatibility assessment
- S-432 Raises a further use of data for a compatibility assessment
All knobits of Data storage and operations.
Source: Shared-URI copy of data-security S-452, for activity OV-14 (k12-dmbok part B candidate, accepted by Peep Küngas on 31 Oct 2026)