Processing of Personal Data That May Indirectly Reveal Sensitive Information on the Basis of a Legal Obligation: The CJEU Draws the Contours | Data Law Insights
CJEU ruling emphasizes that legal obligations for data processing must be lawful, serving public interest and proportionality under GDPR.