News

Under the GDPR, organisations can only process data when it is lawful to do so. This means you must firstly identify the most appropriate of the six lawful bases, and then comply with the requirements attached to your chosen one.

For most of us, the mere mention of the GDPR stirs memories of those hazy few weeks in early summer 2018 - where corporate panic and media scaremongering filled inboxes far and wide with permission-seeking emails and hastily updated privacy policies.