The European Data Protection Board has published its guidelines for the data processing related to contracts for online services in the context of Article 6(1)(b) of the EU General Data Protection Regulation. The EDPB wrote that the guidelines aim to "outline the elements of lawful processing under Article 6(1)(b) GDPR and consider the concept of 'necessity' as it applies to 'necessary for the performance of a contract.'" The guidance addresses specific situations for how the law is applied, including processing for service improvement, fraud prevention, online behavioral advertising and personalization of content.
Full Story