GDPR Rules outline the obligations for data collection, processing, and storage.

Key Points:
1) Data must be lawful and fair
2) People must give consent
3) Security measures are required.

A company cannot collect location data without user consent, something often explained in a GDPR Online Course.