General Data Protection Regulation (‘GDPR’)
Businesses must keep within the law and for processing to be lawful under the GDPR you need to identify a lawful basis PRIOR TO processing the personal data. These have been defined as Âconditions for processing under the Data Protection Act 1998.