Article 6(1)(e) of the GDPR provides that processing is lawful where it is necessary for performing a task in the public interest or where the exercise of official authority is vested in the controller. Article 6(1)(e) would rarely make the grounds for processing personal data for a typical business but would rather be the means for lawful processing for public authorities.  Article 6(1)(e) is directly applicable as a basis for processing as long as the controller carries out a task in the public interest or falls within the exercise of official authority vested in the controller entrusted.  Article 6(1)(e) does not necessarily require that the task requiring processing personal data is explicitly conferred on the authority by law.  For example, it is natural that the Ministry of Education could process personal data, even if there is no explicit legal mandate entrusting the Ministry with the task. This could be so, as the Ministry would be the central authority on a task relating to digital enrollment and application for admission to the programmes.