Lawful basis for processing—decision tree
Lawful basis for processing—decision tree

The following Risk & Compliance precedent provides comprehensive and up to date legal information covering:

  • Lawful basis for processing—decision tree

Lawful basis for processing—decision tree

We cannot process personal data simply because we wish to do so. We can only process personal data if we satisfy one of the conditions set out in Article 6(1) of the UK General Data Protection Regulation (UK GDPR). These are commonly known as the lawful grounds, legitimate grounds or conditions for processing.

This decision tree poses a series of questions to determine whether a proposed processing activity has a lawful basis data under the UK GDPR. If in doubt, please contact [insert name].

Note 1—contractual performance

We may process personal data where necessary:

  1. for the performance of a contract to which the data subject is party,

Related documents:

Popular documents