Unless a data subject has provided informed consent to data processing for one or more purposes , personal data may not be processed .
There is at least one legal basis to do so .
Unless a data subject has provided informed consent to data processing for one or more purposes , personal data may not be processed unless there is at least one legal basis to do so .