Legal Bases for Processing of Personal Data
Jump to
Legal Bases for Processing of Personal Data Start Comparison
Is an identified legal basis required in order to collect or process non-sensitive personal data?

Last review date: 31 December 2024

Yes.

The following are potential legal bases for processing personal data:

         the data subject has provided consent to the processing for the identified purposes

         the personal data is necessary to perform a contract with the data subject

         the personal data is necessary to comply with a legal obligation

         the personal data is necessary to protect the vital interests of a natural person

         other

  • The personal data is necessary to take steps, at the request of the data subject, towards entering into a contract.
  • The personal data is necessary for the administration of justice.
  • The personal data is necessary for the exercise of any functions conferred on any person by or under any law.
Is an identified legal basis required in order to collect or process sensitive personal data?

Last review date: 31 December 2024

Yes

The following are potential legal bases for processing special categories of personal data:

         the data subject has given consent to the processing, where consent is measured to a higher standard than for non-sensitive personal data (for example, additional requirement for consent to be "explicit")

         processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law

         processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent

         processing relates to personal data which are manifestly made public by the data subject

         processing is necessary for the establishment, exercise or defense of legal claims

         other

Processing is necessary:

  • To protect the vital interests (i.e., matters relating to life, death or security) of another person, in a case where consent by or on behalf of the data subject has been unreasonably withheld
  • For medical purposes and is undertaken by either a healthcare professional or a person who, under the circumstances, owes a duty of confidentiality equivalent to that which would arise if that person were a healthcare professional
  • For the purpose of, or in connection with, any legal proceedings
  • For the purpose of obtaining legal advice
  • For the administration of justice
  • For the exercise of any functions conferred on any person by or under any written law
  • For any other purposes as the Minister (charged with the responsibility for the protection of personal data) deems fit
Are there special requirements that apply to the collection or processing of personal data from minors?

Last review date: 31 December 2024

Yes.

A minor within the meaning of data privacy laws is a person below the age of 18.

In what circumstances do these special requirements apply?

Last review date: 31 December 2024

Generally

What are the special requirements that apply to collecting or processing personal data from minors?

Last review date: 31 December 2024

Consent must be given or authorized by the parent/ guardian of the minor