The failure to secure consent for personal data to be used for a given purpose, even if the organisation has rightfully obtained the data in the first place.
