Phil Young: With GDPR, consent is not always king for advisers

Under the General Data Protection Regulation (GDPR), which comes into force on 25 May, data can only be processed under one of six lawful bases. A different basis may apply to different types of data or how it is processed, but you must be certain which one of these apply: Consent Legitimate interest pursued by a controller Necessity for fulfilment of contract Legal obligation Necessary for vital interests of the data subject Necessity for performance of a task in the public interest The first three, and on occasions the fourth basis, are the most relevant for advisers. C...