GDPR: Commission expert group (link)

Excerpt from the minutes of its meeting on 14 February 2017:
"As regards further processing (Article 5(1)(b) and Article 6(4)) COM underlined the approach of the GDPR:
- compatible processing is possible on contract, legitimate interests and vital interests
- compatible processing is on the same legal basis and by the same controller
- no compatibility test possible if the initial processing takes place on the basis of consent or law
- Art 6(4) is not an opening clause"