Lawful basis
Also known as: legal basis
A lawful basis (also called a legal basis) is the legal justification that permits a data controller to process personal data. Under the DPA 2020, controllers must identify and document a lawful basis before processing begins. The recognised lawful bases include: consent, contract, legal obligation, vital interests, public task, and legitimate interests. The lawful basis must be specified in the controller's privacy notice.
DPA reference
Data Protection Act 2020
Related terms in Legal basis
Legitimate interests
A lawful basis for processing where it is necessary for the controller's genuine interests and does not override individual rights.
Public task
A lawful basis for processing necessary to perform a task in the public interest or exercise official authority.
Vital interests
A lawful basis for processing necessary to protect someone's life.