You are here:
How to choose which ‘lawful basis’ to use under the GDPR
Under the GDPR, it’s crucial to identify the lawful basis (or legal reason) you can use to justify why you process personal data. Use the process below to work out which of the 6 lawful bases to use for each of your data processing activities, and avoid wasting time seeking consent that you don't need.
Contents
- What are the lawful bases and why do they matter?
- Public task
- Legal obligation
- Fulfilling a contract
- Vital interests
- Legitimate interests
- Consent
- Additional conditions for special category and criminal offence data
- What do we do once we've identified our lawful basis?
Also in this topic: GDPR
- Email security: sending personal data
- GDPR: ensuring your suppliers are compliant
- GDPR for commercial activities
- GDPR jargon buster
- GDPR: managing your photo archives
- GDPR mythbuster
- GDPR: seeking consent for processing personal data
- GDPR: template record of processing activities
- How to comply with the General Data Protection Regulation
- Processing data: at what age can pupils give consent?
- 'Special category' data under the GDPR
- Subject access requests: guidance and template forms
- Taking and displaying pupil photos and information
- Taking documents home: securing personal data
- The General Data Protection Regulation explained
- Using personal devices: securing personal data
The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides.