5.2 Regulations / Frameworks Organizational Security

Question 1

European Union’s General Data Protection Regulation (GDPR)

Answer 1

personal data collected can only be used for the exact purpose in which explicit consent was obtained. To use email addresses for marketing purposes, separate explicit consent should have been obtained