As the new sheriff in town, the GDPR casts a dark shadow over businesses processing direct marketing data. The regulation has companies wondering if they must obtain new consents for their entire marketing database. The answer is, “it depends.” This problem arises from Recital 171 of the GDPR which states: “Where processing is based on […]