All controllers need to determine which legal basis they are relying on in order to ensure that any processing they undertake is lawful. There is no hierarchy or preferred option within this list, instead each instance of processing should be based on the legal basis which is most appropriate in the specific circumstances.

Controllers should be aware that there may be different legal bases applicable where the same personal data are processed for more than one purpose. Further, it is important to note that ‘consent’, whilst perhaps the most well-known, is not the only legal basis for processing – or even the most appropriate in many cases.

Find out more in our guidance: https://arc-rec-project.eu/wp-content/uploads/2022/02/ARC-Guidance-on-Legal-Bases.pdf

The post What is your reason or justification for processing of personal data? appeared first on Arc Rec Project.