Which of the following is a lawful reason to
process personal data? Select all that apply.
Processing takes place outside of the EU.
Processing is necessary for legal reasons.
The EU citizen has given their consent.
Processing is necessary for the performance of a
contract.