> "It's so commonly used exactly because it's a very simple one-size-fits-all approach". ICO says this [1] about choosing a lawful basis: "You must not adopt a

> "It's so commonly used exactly because it's a very simple one-size-fits-all approach". ICO says this [1] about choosing a lawful basis: "You must not adopt a one-size-fits-all approach. No one basis should be seen as always better, safer or more important than the others, and there is no hierarchy in the order of the list in the GDPR." I think I'll stay clear of your lawyer advise. [1]: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/#how https://ico.org.uk/for-organisations/guide-to-data-protectio...