EUGDPRLawful BasesEASYFree question
The contractual basis also covers processing for:
- A.Any contract between the controller and a third party, citing Article 6(1)(e), which requires a specific statute for every single instance of public-task processing rather than a legal basis in law generally
- B.Steps taken at the data subject's request prior to entering into a contract
- C.Post-contractual marketing, citing Article 6(1)(d) vital interests, which allows reliance on this basis for routine, non-emergency processing
- D.All processing related to business operations
Why B is correct
Article 6(1)(b) covers processing necessary for performing a contract OR for taking steps at the data subject's request prior to entering into a contract.
Know someone studying for GDPR? Send them this one.