A CCPA requirement that organizations limit their usage of consumer data to the purposes disclosed to the consumer at time of collection (unless the organization provides a subsequent notice to the consumer).