Section 4: Grounds for processing

What Section 4 says, in plain English

Two lawful grounds only: consent under Section 6, or one of the certain legitimate uses under Section 7. No general 'legitimate interest' basis exists.

What it means for you

For every processing activity, name the ground. If neither Section 6 nor Section 7 applies, stop. This is stricter than GDPR.