Lawful Basis
What is Lawful Basis?
The legal ground for processing personal data under GDPR Article 6. The six lawful bases are: consent, contract performance, legal obligation, vital interests, public task, and legitimate interests.
Terms that appear alongside lawful basis
Each of these is named in at least one of the same controls as lawful basis. The number is how many controls name both.
- consent 117 shared controls
- data subject 75 shared controls
- gdpr 63 shared controls
- data protection 39 shared controls
- data subject rights 37 shared controls
- lawful basis for processing 37 shared controls
- transparency 36 shared controls
- purpose limitation 30 shared controls
Frameworks that govern lawful basis
What the standards actually require on lawful basis
Requirements naming lawful basis across 6 standards, quoted from the control text.
Standard 1 per Section 19 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed fairly + lawfully + transparently.
JM-DPA2020-Standard1-Fair-Lawful-Transparent-Sec19-Lawful-Basis-Consent-Contract-Legal-Vital-Public-Interest-Legitimate · Jamaica DPA 2020 Standard 1 - Fair + Lawful + Transparent Processing + Section 19 + Lawful Basis + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Legitimate Interests + Privacy Notices →Per Tanzania Personal Data Protection Act: scope + Duty to Register + Registration Application + lawful basis. Align with PDPC Tanzania.
TANZANIA-1 · Scope, Registration, Lawful Basis →Fiji Data Protection Bill 2020 Part II - Data Protection Principles. SIX PRINCIPLES (closely mirror GDPR Art.5): (1) LAWFUL + FAIR + TRANSPARENT processing - personal data must be processed lawfully + fairly + transparently with respect to data subjects;
FjDPB-Principles · Data Protection Principles + Lawful Basis →Articles 16-19 of UU PDP establish the foundational lawful processing framework. Article 16: lawful basis for processing personal data limited to (a) explicit valid consent of the Data Subject for one or more specific purposes;
IDPdp-LawfulBasis-Notice-Consent-PurposeLimitation-DataMinimisation-Art16to19-ExplicitConsent · Indonesia PDP Articles 16-19 + Lawful Basis + Notice + Explicit Consent + Purpose Limitation + Data Minimisation + 6 Lawful Bases + Withdrawal + Transparency →Articles 2-bis and 2-ter and related provisions of the Codice establish Italian-specific lawful processing requirements supplementing GDPR Article 6.
ItalyCodice-LawfulBasis-Notice-Italian-Language-Public-Bodies-Consent-2bis-2ter-Article6-GDPR · Italy Codice Lawful Basis + GDPR Article 6 + Italian-Specific 2-bis Legal Basis + 2-ter Public Bodies + Notice in Italian Language + Consent + Italian-Specific Derogations + Data Subject Rights Handling →Latvia PDPL Section 5 Lawful Basis for Public Interest Tasks - explicit Latvian elaboration of GDPR Article 6(1)(e) public interest task ground including processing by public bodies for archiving + scientific + historical research + statistical purposes + task...
LV-PDPL-Lawful-Basis-Public-Interest-Tasks-S5-Sensitive-Special-Categories-Genetic-Biometric-S30-Purpose-Limit-Sec20-Data-Minim-Sec21 · Latvia PDPL Lawful Basis + S.5 Public Interest + S.30 Special Categories + Purpose Limitation →Questions people ask about lawful basis
What is Lawful Basis?
Why is Lawful Basis important for compliance?
Which compliance frameworks address Lawful Basis?
Where can I learn more about Lawful Basis?
See how Lawful Basis applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.