…and stand by it.
With a lot to do with data protection you are not going to make everyone happy.
The more complicated the organisation that you support, the more that shades of gray apply because the legislation does not really say what is right or wrong, more what you have to consider and then standby your decision.
If you get challenged then so be it – you are either right or wrong but you made a decision that people can get a grip on.