What should we say about function creep?

The organisation should define the approved purposes for using ASSIST and ensure that information collected for those purposes is not subsequently used for unrelated purposes without appropriate assessment.

Examples of uses requiring separate consideration could include:

• Staff performance monitoring
• Profiling
• Sentiment analysis
• Automated risk scoring
• Marketing
• Research
• Model training
• New categories of automated decision making

The DPA limits Wyser's processing to the Service and the customer's instructions.