Additionally, the system must satisfy GDPR requirements for consent, and be limited to use for employment, social security, or social protection law …