How exactly does one enforce in the code a policy of "you can use the data you've collected for the purpose you stated, but you can't use it for any other purpo

How exactly does one enforce in the code a policy of "you can use the data you've collected for the purpose you stated, but you can't use it for any other purpose, nor share it"?