On 25 May 2018, the General Data Protection Regulation (GDPR) enters into force. The GDPR introduces new obligations for organisations collecting, storing and processing data, as well as rights for data subjects. The GDPR provides six legal bases fo…