What is a legal basis?
The GDPR establishes scenarios in which data can be collected by determining a limited list of applicable legal bases.
It's the reason why the processing is allowed, the lawfulness of processing. The choice of a legal basis has a direct impact on the data processing and data subjects' rights. As a data controller, you must anticipate the legal basis of the processing prior to any development.
For example, as an employer, you have a contractual relationship with your employees through their employment contracts. One of your contractual obligations is to remunerate your employees. Therefore, the legal basis for processing payroll management is the performance of the contract.
What are the legal bases provided by the GDPR?
As a reminder, a processing operation corresponds to a purpose, and it must rests on a legal basis. In cases where multiple legal bases could potentially apply, you must choose only one.
Identifying the legal basis of your processing activities.
Are you struggling to identify the legal basis of your processing activities? Do you lack the time to research or the resources to ensure compliance?
With our templates, we even suggest the applicable legal bases for you.