Blog

When can an organisation process personal data because it is in its legitimate interests, and how does it demonstrate that those interests do not override people's rights? Legitimate interests is one of the lawful bases available under Article 6. It can be flexible, but that does not make it a

Every organisation that processes personal data must understand the lawful bases for processing personal data. Under the UK GDPR, these reasons are known as the lawful bases for processing. Choosing the correct lawful basis is an important part of data protection compliance. It affects whether you can process personal data

Navigating GDPR: Understanding the Public Authority Basis In the complex landscape of GDPR compliance, public authorities occupy a unique position. Because they must exercise their powers and duties they need a specific lawful basis for processing data. A data subject will interact with a number of public bodies through his

The contractual basis for data processing under the GDPR is one of the six lawful bases for processing personal data. To get data protection, understanding the legal basis for processing personal data is paramount. Article 6(b) of the General Data Protection Regulation (GDPR) sets out when data processing for the

Of all the lawful bases for data processing under the GDPR, one stands out for urgent and life-saving situations —vital interests. As we embark on this exploration, our journey begins with understanding the critical importance of vital interests in the broader landscape of lawful data processing. Please note: this article

In this article we explore how a statutory duty and data processing work together as set out in the General Data Protection Regulations (GDPR). Understanding the lawful bases for processing is paramount whatever lawful basis you are using. This article delves into the often nuanced yet powerful concept of statutory