Legal Bases for Processing of Personal Data
Jump to
Legal Bases for Processing of Personal Data Start Comparison
Is an identified legal basis required in order to collect or process non-sensitive personal data?

Last review date: 30 December 2024

 Yes

The following are potential legal bases for processing personal data:

☒        the data subject has provided consent to the processing for the identified purposes
☒        the personal data is necessary to comply with a legal obligation
☒        the personal data is necessary for a public interest

Is an identified legal basis required in order to collect or process sensitive personal data?

Last review date: 30 December 2024

☒ Yes 

The following are potential legal bases for processing sensitive personal data:

☒        the data subject has given explicit consent to the processing, where consent is measured to the same standard as non-sensitive personal data
☒        processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law
☒        processing relates to personal data which are manifestly made public by the data subject

Are there special requirements that apply to the collection or processing of personal data from minors?

Last review date: 30 December 2024

 Yes

A minor within the meaning of data privacy laws is a person below the age of 18.

☒         generally
☒        other

It is mandatory to safeguard the identity of the child or adolescent involved in any type of judicial process and to restrict access to the documentation unless there is express authorization from the competent authority.

In what circumstances do these special requirements apply?

Last review date: 30 December 2024

☒         generally
☒        other

It is mandatory to safeguard the identity of the child or adolescent involved in any type of judicial process and to restrict access to the documentation unless there is express authorization from the competent authority.

What are the special requirements that apply to collecting or processing personal data from minors?

Last review date: 30 December 2024

☒        consent must be given or authorized by the holder of parental responsibility over the child