This is one of the most fundamental GDPR decisions you need to make! Under the GDPR you must have a valid lawful basis in order to process personal data. There are six available lawful bases for processing. No single basis is ’better’ or more important than the others. Which basis is most appropriate to use will depend on your purpose and relationship with the individual. Most lawful bases require that processing is ‘necessary’ for a specific purpose. If you can reasonably achieve the same purpose without the processing, you won’t have a lawful basis.
You must determine your lawful basis before you begin processing, and you should document it. If you are not sure which best applies for you then please get in touch. We can help you.
Take care to get it right first time. You should not swap to a different lawful basis at a later date without good reason. Your privacy notice should include your lawful basis for processing as well as the purposes of the processing. If your purposes change, you may be able to continue processing under the original lawful basis if your new purpose is compatible with your initial purpose.
Your Optindigo pack includes a document to help you decide the most appropriate lawful basis for your processing activity.
This is important! Call us anytime.
Good luck all.