Anti-Doping Organizations  shall ensure that they have a valid legal  authority or basis for such Processing , in accordance with the International Standard for the Protection of Privacy and Personal Information and applicable laws.