28 Apr 2026 · 8 min read
Beyond Legal #27: The marketing director who thought it was just an email list
A marketing director ran a campaign without a lawful basis, enriched the contact list with third-party data without authorisation, and never involved the Data Protection Leader. The Supervisory Authority was not equally relaxed about it.
