29. The elements necessary to implement the principle of lawfulness include—

(a)  appropriate legal basis or legitimate interests clearly connected to the specific purpose of processing;

(b)  processing that is necessary for the purpose;

(c)  the data subject being granted the highest degree of autonomy possible with respect to control over their personal data;

(d)  a data subject knowing what they consented to and a simplified means to withdraw consent; and

(e)  restriction of processing where the legal basis or legitimate interests ceases to apply.