Lawful basis and the journalistic exemption
Almost everything you gather about people in media work is personal data under the GDPR. A name and a photograph, certainly, but also a voice recording, an email address, a phone number, a video interview, a reader's tip-off about a neighbour, a freelancer's invoice. The test is whether information relates to an identifiable person, and identification can happen indirectly. A…