The subjects had not been informed about the data processing, and the data controllers had not complied with the principle of purpose limitation.
the subjects had not been informed about the data processing and the data controllers had not complied with the principle of purpose limitation
 subject    inform   data process   data controllers   comply   principle  purpose limitation