28 Apr 2026 · 8 min read
Beyond Legal #27: The marketing director who thought it was just an email list
A marketing director ran a campaign without a GDPR lawful basis and enriched contact lists with third-party data. The supervisory authority was not relaxed about it.
