This lecture covers the legal aspects of personal data processing, including the definition of personal data, the scope of the law, legal bases for processing, principle-based regulation, data protection rights, and real-life cases. It delves into the GDPR, consent requirements, and the rights of individuals regarding their data. The lecture also explores the challenges posed by online tracking, the same origin policy, and crafty workarounds used by websites to track users. Additionally, it discusses the implications of data tracking in apps and the concerning use of personal data by the US military. The lecture concludes with insights into real-time bidding and a major breach in a biometrics system.