Why you are allowed to use the data.
WHAT A LAWFUL BASIS IS
The justification for processing, which you must identify before you start.
WHAT THE COMMON BASES ARE
Consent Performance of a contract A legal obligation Vital interests A public task Legitimate interests
WHAT CONTRACT COVERS
Processing necessary to deliver what the person asked for.
WHAT EXAMPLE LOOKS LIKE
Using an address to deliver an order.
WHAT LEGAL OBLIGATION COVERS
Processing you must do by law.
WHAT EXAMPLE LOOKS LIKE
Retaining financial records for tax purposes.
WHAT LEGITIMATE INTERESTS COVERS
Processing that serves a genuine interest, balanced against the person's rights.
WHAT IT REQUIRES
An assessment, documented.
WHAT THAT ASSESSMENT CONSIDERS
Whether the interest is legitimate Whether the processing is necessary for it Whether it is outweighed by the person's interests
WHAT CONSENT REQUIRES
A freely given, specific, informed and unambiguous indication.
WHY IT IS FREQUENTLY THE WRONG CHOICE
It can be withdrawn, and it must be genuinely optional.
WHAT TO DO
Choose the basis that actually fits, and record it.
WHAT NOT TO DO
Rely on consent for something the person cannot realistically refuse.
