Lawful Basis
What is Lawful Basis?
The legal ground for processing personal data under GDPR Article 6. The six lawful bases are: consent, contract performance, legal obligation, vital interests, public task, and legitimate interests.
Terms that appear alongside lawful basis
Each of these is named in at least one of the same controls as lawful basis. The number is how many controls name both.
- consent 117 shared controls
- data subject 75 shared controls
- gdpr 63 shared controls
- data protection 39 shared controls
- data subject rights 37 shared controls
- lawful basis for processing 37 shared controls
- transparency 36 shared controls
- purpose limitation 30 shared controls
Frameworks that govern lawful basis
What the standards actually require on lawful basis
Requirements naming lawful basis across 6 standards, quoted from the control text.
The basis depends on the purpose and context; the employer must think about why it wants to monitor and pick the basis that best fits, must not use a one-size-fits-all approach, should identify and document every basis that applies from the outset, and should...
uk-ico-employment-practices-and-data-protection-monitoring-workers-2023::1.4(a) · 1.4(a) Choose the lawful basis for the specific purpose, document it from the start and do not switch later →Standard 1 per Section 19 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed fairly + lawfully + transparently.
JM-DPA2020-Standard1-Fair-Lawful-Transparent-Sec19-Lawful-Basis-Consent-Contract-Legal-Vital-Public-Interest-Legitimate · Jamaica DPA 2020 Standard 1 - Fair + Lawful + Transparent Processing + Section 19 + Lawful Basis + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Legitimate Interests + Privacy Notices →Modern systems (high definition, powerful lenses, online sharing) can be very intrusive, so the organisation should first consider achieving its aim by less privacy-intrusive means (lighting, fencing, regeneration of a disused space) and use surveillance only...
uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.1 · P.1 Consider less intrusive alternatives first, aim cameras at the relevant space only, and document the lawful basis before deployment →Processing is lawful only where the data subject has given and not withdrawn consent for the specific purpose, or the processing is necessary for the performance of a contract with the data subject or steps at the data subject's request before a contract, for...
nigeria-data-protection-act-2023-ndpa::25 · Lawful basis of personal data processing →Articles 16-19 of UU PDP establish the foundational lawful processing framework. Article 16: lawful basis for processing personal data limited to (a) explicit valid consent of the Data Subject for one or more specific purposes;
IDPdp-LawfulBasis-Notice-Consent-PurposeLimitation-DataMinimisation-Art16to19-ExplicitConsent · Indonesia PDP Articles 16-19 + Lawful Basis + Notice + Explicit Consent + Purpose Limitation + Data Minimisation + 6 Lawful Bases + Withdrawal + Transparency →Adhere to Oman Personal Data Protection Law (Royal Decree 6/2022) issued 9 February 2022 + effective 13 February 2023 Sections covering scope (applies to processing of personal data of identified or identifiable natural persons in Oman + or by controllers/proc...
OMANPDPL-1 · Scope, Lawful Basis, Consent, and Sensitive Data Protection →Questions people ask about lawful basis
What is Lawful Basis?
Why is Lawful Basis important for compliance?
Which compliance frameworks address Lawful Basis?
Where can I learn more about Lawful Basis?
See how Lawful Basis applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.