What must be obtained if legacy information will be used for a new purpose?

When legacy information is repurposed for a new use, it is essential to obtain new consent from the individuals whose data is involved. This requirement ensures that individuals are fully informed about how their data will be utilized in a manner that may differ from the original purpose for which it was collected.

Consent plays a crucial role in data privacy and protection, and obtaining new consent reflects a commitment to transparency and respecting individuals' rights. It allows individuals to understand the nature of the new use and to make an informed decision about whether they consent to it. Relying solely on prior consent, especially when the purpose has changed, could violate ethical standards and legal regulations surrounding data protection.

In contrast, other forms of consent, such as opt-out consent or written proof, may not provide the same level of assurance that the individuals are aware of the new purpose and agree to it. Therefore, securing new consent is the most appropriate course of action when legacy information is redirected for a new application.