Andrew Cormack

Helen As far as I can see, it means you still have the same options as at present. Since that sharing isn't (as far as I know) something that's covered by a specific law with its own processing rules, it's not one of your "tasks" so the GDPR's ban on Legitimate Interest and doubt about Consent don't apply. Note that David Erdos has pointed me at the case where the ECJ seems to have come up with its idea of a "public authority" working forward from the Treaty - as in today's post, fortunately their concept seems to be the same as I'd come to by working backward from the use of the concept in the GDPR :-) Andrew