By Legal Basis

Some of the legal bases relate to a specific purpose – a legal obligation, the performance of a contract with the person, the protection of a person`s vital interests or the performance of your public duties. If you are dealing for these purposes, the appropriate legal basis may very well be obvious, so it is worth taking this into account first. Vital interests should cover only those interests essential to a person`s life. This legal basis is therefore very limited in its scope and generally applies only to matters of life and death. ☐ We have documented our decision on the legal basis on which we can demonstrate compliance. You may prefer to consider legitimate interests as your legal basis if you wish to retain control of the processing and take responsibility for proving that it meets the reasonable expectations of individuals and would not have an unjustified impact on them. On the other hand, if you prefer to give individuals full control and responsibility over their data (including the ability to change your mind about whether it can continue to be processed), you should consider relying on the consent of individuals. However, the university must carefully consider its basis – it is the responsibility of the controller to be able to prove which legal basis applies to the purpose of the respective processing. You have given your clear consent for you to process your personal data for a specific purpose. An organization may ask for your consent to the processing of your personal data.

They need to give you all the information you need to know about that particular processing activity. The information may not be ambiguous and it must be clear to you what specific use of your personal data you consent to. Of course, you must be able to give your consent freely. The organization must not force or deceive you into giving your consent. You can revoke your consent at any time. For children, consent should sometimes be given by their parents or guardians. If the assigned value of a property is based solely on its acquisition cost, its basis is called the cost base – which is usually the case with most assets. Acquisition costs may include amounts paid through cash, debt securities and other real estate goods or services.

☐ We have examined the purposes of our processing activities and selected the most appropriate legal basis (or legal bases) for each activity. The basic approach is the same. You should think about your goals and choose the foundation that suits you best. You can always use our legal base tool to help you. The GDPR requires that all controllers and processors have a valid legal basis for the processing of personal data. In particular, in some cases, you can always take into account consent or legitimate interests, depending on the type of processing and your relationship with the person. There is no absolute prohibition on authorities using consent or legitimate interests as a legal basis, although there are some restrictions. Further information can be found on the specific instructions page for each legal basis.

This legal basis should only be used if no other reason is available, for example in the event of a medical emergency. You must therefore keep a record of the basis on which you rely for each purpose of processing and a justification of why you believe this to be true. There is no standard form for this, as long as you make sure that what you register is enough to prove that there is a legal basis. This will help you comply with the responsibility and will also help you draft your privacy notices. The public work base is more relevant to much of what you do. If you are a public authority and can demonstrate that the processing is for the purpose of performing your duties under UK law, you can use the database for public tasks. But if it`s for a different purpose, you can always consider a different foundation. The principle of accountability requires that you can demonstrate that you comply with the UK GDPR and that you have appropriate policies and processes in place. This means that you can prove that you have correctly verified which legal basis applies to each processing purpose and that you can justify your decision.

This basis shall apply where the processing of personal data is necessary for the performance of a task or function carried out in the public interest or in the exercise of official authority vested in the controller (e.g. public authority). It is your responsibility to ensure that you can demonstrate which legal basis applies to the purpose of the respective processing. The processing of personal data is necessary for the performance of a task in the public interest and the task or function has a clear legal basis in the law. In this case, there is no specific law that specifies the personal data that an organization must specifically process, but the task that an organization performs is defined in a law. For example, a school has a public mission to teach children, or a local government may use camera surveillance in public places because it has the task of dealing with public safety and order.