EDPS warns that data processing under the Regulation “must be both lawful and justified”
I wasn’t going to publish this blog until I saw the above headline from the European Data Protection Supervisor (EDPS) recommendations for the Data Protection Regulation (see references). This headline reads: “All data processing must be both lawful and justified”. This issue has been a concern of mine for sometime but I had convinced myself that my concerns were misplaced. However as the EDPS has raised them, I think it is worth resurrecting the point for consumption by the data




