A lawful basis and purpose precede processing.