GDPR Back to glossary
Legal Basis
The legal basis is the legal ground, among the six provided by GDPR (consent, contract, legal obligation, vital interest, public interest task, legitimate interest), that justifies a personal data processing activity.
Why it matters
Every processing activity must rest on a single, clearly identified legal basis from the outset; the absence of a valid legal basis makes the processing unlawful.
Concrete example
Payroll processing rests on the performance of the employment contract, while sending a marketing newsletter rests on consent.
Related notions
Legitimate interestContractual performanceLegal obligation
Related Kaliteq diagnostics
Assess your organization's maturity on this topic
Start the diagnostic