GDPR – Prohibition law with constituent elements of permissibility
As under the Federal Data Protection (BDSG) act old version, the principle of "prohibition subject to permission" applies. This means any form of data processing is prohibited - unless a legal basis legitimises the data processing or the data subject [...]