Jane’s personal data has to be:

-Processed lawfully, fairly and transparently

‘Lawfully’ means Mike must have a lawful basis for processing her data.

He can’t use it in a way that would be against the law, but he also has to have a good reason.

In this case, Mike is fine because he’s carrying out a contract, and he has Jane’s consent.