Mission creep, undoubtedly...
"...Any requirement to use personal data for any purpose other than for which it was collected should go through a vetting process...."
When I was a Civil Servant it was axiomatic that data collected from citizens was purely to be used for that project, and was NEVER to be passed to any other part of the department. And CERTAINLY NOT out to another department.
Of course, the fact that much of the data was paper based, and it would have been an arm and a leg of work to transfer it may have supported that attitude. But it is instructive to see that something which was a rule set in stone in the 1970s/80s has now quietly been reversed....