Legal basis
How to document and verify the legal basis for each processing activity.
The six legal bases of the GDPR
- Consent — Art. 6(1)(a)
- Performance of a contract — Art. 6(1)(b)
- Legal obligation — Art. 6(1)(c)
- Vital interests — Art. 6(1)(d)
- Public interest — Art. 6(1)(e)
- Legitimate interest — Art. 6(1)(f)
How to choose the right legal basis
Privacta guides you in choosing the legal basis with contextual questions based on the type of processing. For marketing it is typically consent; for employment relationships, legal obligation or contract.
A wrong or missing legal basis is among the most common violations challenged by data protection authorities. Privacta automatically flags processing activities without a documented legal basis.
📄 Add a table of legal bases by type of processing