1 Personal data may only be processed lawfully.
1 Anyone who processes personal data must not unlawfully breach the privacy of the data subjects in doing so.
1 A breach of privacy is unlawful unless it is justified by the consent of the injured party, by an overriding private or public interest or by law.
a. refrain from processing personal data unlawfully;
b. eliminate the consequences of unlawful processing;
c. ascertain whether processing is unlawful.