Under GDPR, is a controller generally permitted to switch from one lawful basis to another after processing has already begun?
-
A
Yes, at any time without restriction
-
B
No, switching lawful bases mid-processing is generally not permitted
-
C
Yes, but only if the data subject consents
-
D
Yes, if the supervisory authority approves the switch