25 April 2018

GDPR - a contractual basis to process PII data


Contract
You can rely on this lawful basis if you need to process someone’s personal data:
to fulfil your contractual obligations to them; 
or
because they have asked you to do something before entering into a contract (eg provide a quote).

The processing must be necessary. If you could reasonably do what they want without processing their personal data, this basis will not apply.

You should document your decision to rely on this lawful basis and ensure that you can justify your reasoning.


No comments:

Post a Comment