Per the EU DPD (officially Act 95/46/EC), conditions that must be met for necessary collection fall into three categories:
a) Consent, Transparency, and Security
b) Purpose, Consent, and Retention
c) Transparency, Security, and Disclosure
d) Legitimacy, Transparency, and Purpose
