I asked the ICO this:if an organisation has only provided untrue reasons for purpose of processing data, please could the ICO explain to me how this is abiding by the law?Although the ICO replied, the ICO reused to answer the question. Draw your own conclusions
