An employer may process its workers' data for the purposes and within the limits of the Labour Code and complementary or sectoral legislation, including through a processor or certified accountant under a service contract with equal secrecy guarantees; unless the law provides otherwise, the worker's consent is not a lawful basis where processing gives the worker a legal or economic advantage (28(3)(a), which the CNPD disapplies) or falls under GDPR Article 6(1)(b) contract performance (28(3)(b)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.