Article 11.5b

• 1

  Trust service providers shall only process personal data obtained from the data subject himself or with his explicit consent, and to the extent that the processing of such personal data is required for the provision of the trust service.

• 2

  The personal data referred to in the first paragraph shall not be collected or processed for other purposes unless the data subject has given his or her express consent.

• 3

  Notwithstanding the second paragraph, the explicit consent of the data subject shall not be required if the processing of the personal data referred to in the first paragraph is necessary for the purpose of fraud detection, or if the processing is otherwise required by or pursuant to law.