What is the company first required to do?

A company has collected personal data tor direct marketing purpose on the basis of consent. It is now considering using this data to develop new products through analytics.

What is the company first required to do?
A . Obtain specific consent for the new processing
B . Only inform the data subjects of the new purpose.
C . Proceed no further, as such repurposing is unlawful
D . Update the privacy notice upon which consent was given

Answer: A