Lawfulness of processing
Art. 6
-
Last updated
Mandatory
Catalog reference
Every processing activity must rest on one of the six lawful bases: consent, contract necessity, legal obligation, vital interests, public task, or legitimate interests. Identify and record which basis applies to each processing activity before you start.
Narrative — how we satisfy this requirement
The records of processing name a legal basis for each activity: contract for customer services, legal obligation for payroll, and legitimate interest for security logging.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due