Under the GDPR, businesses need to specify their basis for processing personal data, and the European Data Protection Board has recently released guidelines (2/2019) that take a narrow view of the "contract" basis for processing under Article 6(1)(b). Join Mike Yaeger and Steve Blickensderfer as they discuss these guidelines and how they affect compliance for US-based businesses.