Under certain circumstances WPO may be expected to disclose personal data. These circumstances include those as set out in Article 6.1 of the GDPR, which establishes that processing shall be lawful only if and to the extent that at least one of the following applies: