Processing and transfer of data

This subtopic explains and provides practical guidance on the six potential lawful grounds for processing personal data under the United Kingdom General Data Protection Regulation (UK GDPR) (Assimilated Regulation (EU) 2016/679), also known as the legitimate grounds or conditions for processing. It also provides practical guidance on specific issues such as:

  1. legitimate interest assessments

  2. direct marketing

  3. data processing in the employment relationship

  4. supply chains under data protection law

  5. data sharing between controllers

  6. processing children’s personal data

Lawful grounds for processing personal data

There are six potentially lawful grounds for processing personal data:

  1. the data subject has given consent to the processing of their personal data for one or more specific purposes

  2. processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract

  3. processing is necessary for compliance with a legal obligation to which you are subject

  4. processing is necessary to protect the vital interests of the data subject or another natural person

  5. processing

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

Powered by Lexis+®
Latest Practice Compliance News
View Practice Compliance by content type :

Popular documents