Lawfulness of Processing, Legal Obligation
Controllers and Processors, Data Protection Officer (DPO)
Principles, Purpose limitation