Legitimate Interest, Principles, Purpose limitation, Sensitive Data
Controllers and Processors, Data Protection Impact Assessment (DPIA)