Apr 05, 2022
In General Discussions
However, there are two other mechanisms by which use of the data can be legal, which in some cases will support B2C actions, and will almost certainly cover most areas of B2B activity. "Contractual necessity" will remain a lawful basis for processing personal data under GDPR. This means that if it's required that the individual's data is used to fulfil a contractual obligation with them or take steps at their request to enter into a contractual agreement, no further consent will be required. In layman's terms then, using a person's contact details to generate a contract and fulfil it is permissible. There is also the route email list of the "legitimate interests" mechanism, which remains a lawful basis for processing personal data. The exception is where the interests of those using the data are overridden by the interests of the affected data subject. It's reasonable to assume, that cold calling and emailing legitimate business prospects, identified through their job title and employer, will still be possible under GDPR. 3 Steps to Compliance... Know your data! Despite the flexibility afforded by these mechanisms, especially in the context of B2B communications, it's worth mapping out how personal data is held and accessed within your business.