July 24, 2025 In order for data controllers to lawfully process personal data, as required by the core principle of personal data protection, such processing must be based on a legal basis. The Law on Personal Data Protection (LPDP) defines six legal bases for the processing of non-sensitive personal data, while it provides a separate…