Second GDPR blog1.pngUnder Article 6 of the European Union’s GDPR there is an obligation to ensure that you have lawful grounds to process personal data.