Confirmation of legal basis for data protection

Summary
Confirmation of legal basis for data protection