Processing and transfer of data

Copyright © 2025 LexisNexis

This subtopic explains and provides practical guidance on the six potential lawful grounds for processing personal data under the United Kingdom General Data Protection Regulation (UK GDPR) (Assimilated Regulation (EU) 2016/679), also known as the legitimate grounds or conditions for processing. It also provides practical guidance on specific issues such as:

  1. •

    legitimate interest assessments

  2. •

    direct marketing

  3. •

    data processing in the employment relationship

  4. •

    supply chains under data protection law

  5. •

    data sharing between controllers

  6. •

    processing children’s personal data

Lawful grounds for processing personal data

There are six potentially lawful grounds for processing personal data:

  1. •

    the data subject has given consent to the processing of their personal data for one or more specific purposes

  2. •

    processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract

  3. •

    processing is necessary for compliance with a legal obligation to which you are subject

  4. •

    processing is necessary to protect the vital interests of the data subject or another natural person

  5. •

    processing

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Existing user? Sign-in TAKE A FREE TRIAL
Powered by Lexis+®
Latest Practice Compliance News

Jonathan Fisher KC updates on fraud offences and disclosure reform progress

Chair of the Home Office Independent Review of Disclosure and Fraud Offences, Jonathan Fisher KC has published an update outlining the progress of the review's second phase. The update identifies three focus areas: whistleblowing mechanisms for fraud detection, sentencing reform and technological/legislative changes. Fisher reports consulting over 120 stakeholders across the justice system and plans to submit final recommendations to the Home Secretary by end-2025. The review examines the Fraud Act 2006's effectiveness for internet fraud cases, which now constitute 43% of all recorded crime in England and Wales.

Practice Compliance weekly highlights—3 July 2025

This week's edition of Practice Compliance weekly highlights includes: OFSI’s new confidential reporting guidance, a Red Alert on Russian oil sanctions evasion, US sanctions targeting cybercrime infrastructure, analysis of the conclusions of the cross-government review of UK sanctions implementation and enforcement and news of a new Practice Note on the DUAA 2025 and its implications for data protection compliance.

AI risks leaving UK businesses exposed to insurance gaps

Law360, London: Businesses that replace workers with artificial intelligence (AI) tools could face difficulties when they make claims under standard negligence insurance policies after consumers lose out, lawyers say.

OFSI updates UK Financial Sanctions FAQs

The Office of Financial Sanctions Implementation (OFSI) has updated its UK Financial Sanctions FAQs, adding FAQ 149 on ‘What constitutes an economic resource?’, FAQs 150–151 relating to Crown Dependencies and Overseas Territories and FAQ 152 on ‘When should securities held at designated local Russian registrars be reported to OFSI?’. Additionally, FAQs 123–124 have been moved to the withdrawn FAQs document.

View Practice Compliance by content type :  
News
Practice notes
Precedents
Q&As

Popular documents

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit

Can shares in a limited company that have not been paid-up at all be cancelled?

Can shares in a limited company that have not been paid-up at all be cancelled?A limited company having a share capital may not alter that share capital, except in the ways listed in section 617 of the Companies Act 2006 (CA 2006). Shares in a company cannot simply be cancelled without following an

Glossary—Latin legal terms

Glossary—Latin legal termsDespite attempts in recent years to simplify the language used in legal cases, there are still a number of Latin phrases commonly used in personal injury claims. The following Latin phrases are listed in alphabetical order:Latin

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements[Insert addressee details]Dear [insert name][It is our understanding that [insert name of prospective employee] [was an employee of yours between the dates of [insert dates as appropriate] OR is a current employee of
If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal

If a beneficiary signs a deed of disclaimer of their share of an estate and the estate pays their legal fees, will that count as a PET against their estate?A disclaimer is the refusal of a gift prior to acceptance. The refusal of the gift must take place before the beneficiary accepts any benefit

Can shares in a limited company that have not been paid-up at all be cancelled?

Can shares in a limited company that have not been paid-up at all be cancelled?

Can shares in a limited company that have not been paid-up at all be cancelled?A limited company having a share capital may not alter that share capital, except in the ways listed in section 617 of the Companies Act 2006 (CA 2006). Shares in a company cannot simply be cancelled without following an

Glossary—Latin legal terms

Glossary—Latin legal terms

Glossary—Latin legal termsDespite attempts in recent years to simplify the language used in legal cases, there are still a number of Latin phrases commonly used in personal injury claims. The following Latin phrases are listed in alphabetical order:Latin

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements

Template for regulatory references given by SMCR firms and disclosure requirements[Insert addressee details]Dear [insert name][It is our understanding that [insert name of prospective employee] [was an employee of yours between the dates of [insert dates as appropriate] OR is a current employee of