Lawful Basis for Processing
What is Lawful Basis for Processing?
The legal grounds under data protection law that justify the processing of personal data, including consent, contract performance, legitimate interest, and legal obligation.
Terms that appear alongside lawful basis for processing
Each of these is named in at least one of the same controls as lawful basis for processing. The number is how many controls name both.
- lawful basis 37 shared controls
- consent 30 shared controls
- data subject 15 shared controls
- data minimisation 8 shared controls
- purpose limitation 8 shared controls
- gdpr 7 shared controls
- transparency 6 shared controls
- compliance 6 shared controls
Frameworks that govern lawful basis for processing
What the standards actually require on lawful basis for processing
Requirements naming lawful basis for processing across 6 standards, quoted from the control text.
Process personal data only with a defined lawful basis under Armenian law, primarily data subject consent or statutory authority.
AM-DPA-01 · Lawful Basis for Processing →Lawful basis for processing. Control from Bahrain PDPL framework, domain: Bahrain PDPL: Data Collection & Consent.
BH-PDPL-03 · Lawful basis for processing →Processing of personal data may take place where at least one of the lawful bases under GDPR Article 6 is met; the Act adds national specifics for certain bases.
DK-502-§6 · Lawful basis for processing →Per Panama Law 81: establish lawful basis + obtain valid consent + provide notice. Requirements include (a) obtain valid consent that is free + specific + informed + unambiguous + with mechanism for withdrawal + (b) recognise alternative legal bases per the La...
PANAMA-2 · Consent, Notice, and Lawful Basis for Processing →Processing is lawful only if it meets a Schedule I condition: consent; necessity for a contract with the data subject or pre-contract steps at their request; a legal obligation under written law; an emergency threatening life, health or safety;
sri-lanka-personal-data-protection-act-no-9-of-2022::s5 · Section 5 and Schedule I: Lawful basis for processing →Articles 16-19 of UU PDP establish the foundational lawful processing framework. Article 16: lawful basis for processing personal data limited to (a) explicit valid consent of the Data Subject for one or more specific purposes;
IDPdp-LawfulBasis-Notice-Consent-PurposeLimitation-DataMinimisation-Art16to19-ExplicitConsent · Indonesia PDP Articles 16-19 + Lawful Basis + Notice + Explicit Consent + Purpose Limitation + Data Minimisation + 6 Lawful Bases + Withdrawal + Transparency →Questions people ask about lawful basis for processing
What is Lawful Basis for Processing?
Why is Lawful Basis for Processing important for compliance?
Which compliance frameworks address Lawful Basis for Processing?
Where can I learn more about Lawful Basis for Processing?
See how Lawful Basis for Processing applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.