Data protection regulation will go on to use. This implies there will have to always be a valid lawful basis for the gathering and processing of personal informa