GDPR · pillar 1 of 6
Lawful basis
Six bases, none of them a default. Picking one is a decision you record, not a formality.
- 1 Six lawful bases, no hierarchy Processing is lawful if one of the six bases in Article 6(1) applies: consent, contract, legal obligation, vital…
- 2 What consent has to be Consent means freely given, specific, informed and unambiguous, by a statement or a clear affirmative action — and…
- 3 Legitimate interests is a test, not a label Legitimate interests requires a three-part assessment: a real interest, processing that is necessary for it, and a…
Start this pillar See the whole map
Read against Regulation (EU) 2016/679 (GDPR), Court of Justice of the EU, Case C-311/18 (Schrems II), 16 July 2020 on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.