What is a requirement for lawful personal data processing?

For processing of personal data to be legal, a number of requirements must be fulfilled.

What is a requirement for lawful personal data processing?
A . A ‘code of conduct’, describing what the processing exactly entails, must be in place.
B . The data subject must have given consent, prior to the processing to begin.
C . The processing must be reported to and allowed by the Data Processing Authority
D . There must be a legitimate ground for the processing of personal data.

Answer: D