Histology labs must ensure that personal data is collected and processed based on one of the lawful bases specified in GDPR, such as consent, performance of a contract, or legitimate interest. Data must be handled with transparency, informing individuals about how their data will be used, stored, and shared. Additionally, data minimization principles should be followed, collecting only the data necessary for the intended purpose.