ABSTRACT

In addition to complying with principles and the prior information requirements, organizations must also comply with legitimate processing conditions. However, organizations must not mislead individual data subjects when obtaining and processing personal data and must also provide a number of prior information requirements to the individual data subjects. In addition to the data protection principles, organizations must satisfy and meet one of the legitimate processing conditions. The legitimate processing conditions must be complied with in addition to the data protection principles. To collect and process personal data, in addition to complying with data protection principles, organizations must comply with or fall within one of the following general or ordinary personal data legitimate processing conditions. The purpose of the processing must be determined in that legal basis or, as regards the processing referred to in point, must be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in controller.