4 ms·Other way around. The person processing the data has a duty to make sure that they have a legal basis.by robin_reala 2y agoOther way around. The person processing the data has a duty to make sure that they have a legal basis.