Question: what are lawful basis for processing personal data?
Answer: "Contractual necessity" remains a lawful basis for processing personal data. Compliance with legal obligations. Personal data may be processed on the basis that the controller has a legal obligation to perform such processing.