The European Data Protection Board (“EDPB“) published on April 12, 2019 the draft Guidelines 2/2019 (the “EDPB Guidelines“) on the processing of personal data under Article 6(1)(b) of the General Data Protection Regulation (the “GDPR“)1 in the context of the provision of online services to data subjects (available here). These Guidelines clarify the applicability of one of the legal basis for processing laid down under GDPR which justifies the processing of personal data necessary for the performance of a contract.
The EDPB Guidelines are mainly focused on the online services sector.