Organisations can collect and process personal data so long as there is a legitimate reason permitted by law for doing so. They need to map all processing to one of the legitimate purposes. Organisations must inform individuals about processing purposes and details in a transparent manner.
Key learning objectives:
When is an organisation allowed to collect and process personal data?
What does consent from an individual mean?
How does an organisation inform individuals about its handling of their personal data?