Shining a light on what “necessity” means for GDPR & tightening up “contract” as a lawful processing ground in the context of “online services”

The European Data Protection Board (EDPB) has published a set of guidelines (in draft) for public consultation. These will be absolutely key to providers of online services, such as social media, e-commerce, internet search engines, communication an...