Think globally, but direct market locally
Article 6 of the GDPR requires data controllers to have a lawful basis for data processing.
Anyone following the IAPP Privacy List knows that one of the hottest debates raging is whether direct marketing communications can rely on a “legitimate interest” basis or must be based on explicit consent.
Source: DPO Confessional: Think globally, but direct market locally