I have one last point. In my research, the GDPR outlines the principles for processing personal information “lawfully, fairly”, and it does emphasize the importance of respecting individual “rights and freedoms”. I know that's something we've talked about, but they seem to put that all together when they're using this basis.
Thank you very much.