thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Lawful Basis for Processing

One of six GDPR Article 6 grounds required to process personal data lawfully.

Definition

The six lawful bases are consent, contract, legal obligation, vital interests, public task, and legitimate interests. The basis should be determined before processing and documented; it affects which rights apply, such as portability for consent and contract. Processing special category data also requires an Article 9 condition.

Example

An employer processes payroll data under the contract and legal obligation bases.

Exam tip

Consent is not always the best basis; for employees it is rarely valid because of power imbalance.

Related terms