# data[].attributes.body
Tisetso should explain to her clients/customers her other purposes for the data that she asks from them in their transactions during the billing process. This can be done similarly in a manner that is familiar to the general public through transparent terms and conditions where the clients can choose to agree and proceed or to disagree with its content. In theory, Tisetso can abide by the core principles of Data Protection and Privacy laws that she has previously failed upon.

# data[].attributes.headline
Are Tisetso's customers aware that she uses their data mined information for such a purpose?

# data[].attributes.subject
Are Tisetso's customers aware that she uses their data mined information for such a purpose?

# data[].attributes.body
Given the details in the scenario, they are not informed that their information is used for a separate purpose besides the billing transaction.

# data[].attributes.body
Tisetso's actions do not meet with the core principles of Data Protection and Privacy, specifically with the use of personal data in a fair and transparent manner given that her customers as identified in the scenario, are unaware of her other uses for their information.

# data[].attributes.body
In terms of existing frameworks relating to Data Protection and Privacy, the European Union’s 2016 General Data Protection Regulation (GDPR) is one of the most recent comprehensive regulations of data protection and privacy. In order to understand the general principles of this kind of law, it is necessary to comprehend their core principles which are described as the following by the GDPR:

·  Personal data collection, storage, and use must be processed lawfully, fairly, and in a transparent manner in relation to the data subject;

·  collected for specified, explicit and legitimate purposes;

·  adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;

·  accurate and, where necessary, kept up to date;

·  kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed and processed in a manner that ensures appropriate security of the personal data.

# data[].attributes.body
Data mining, according to Oxford Languages, is the practice of analyzing large databases in order to generate new information. It is a process of sorting and extracting relevant data from databases consisting of large data sets to discover patterns and relationships. There are tools popularly used by data miners in order to achieve their purposes such as Rapid Miner, Rattle, Orange, and there exists more.