Lawful processing

Lawful basis for processing personal data

In order to process personal data you must have a lawful basis to do so. The lawful grounds for processing personal data are set out in Article 6 of the GDPR. These are: the consent of the individual; performance of a contract; compliance with a legal obligation; necessary to protect the vital interests of a person; necessary for the performance of a task carried out in the public interest; or in the legitimate interests of company/organisation (except where those interests are overridden by the interests or rights and freedoms of the data subject).