As part of project execution if you have to process client data for a purpose relevant for delivering the service but not originally stated by client, what would you do?
a. as long as the processing is relevant for delivaring the sevices , we may decide on how to process
b. we have to obtan client permisson before processing, wven if it is relevent for the sevices
c. we may outsources such processing in which case we will no longer be reliable
d. if we can pseudonymize such personal data we do not have inform or take client approval