Lawful basis
The GDPR Article 6 requirement that every processing activity rest on one of a defined set of legal grounds (consent, contract, legitimate interest, and others), recorded alongside an access purpose so an access log can demonstrate not only why access occurred but that the underlying processing was legally justified.
Defined in 2 GAGE programs, which carry 5 distinct definitions of it. The wording above is taught in AI Data Governance: The Data Chair.
How each discipline defines it
The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.
The GDPR Article 6 requirement that every processing activity rest on one of a defined set of legal grounds (consent, contract, legitimate interest, and others), recorded alongside an access purpose so an access log can demonstrate not only why access occurred but that the underlying processing was legally justified.
The legal ground a controller relies on to process personal data (for example consent, legitimate interest, or contract under the GDPR). A vendor's "compliant" claim is only meaningful if it names a lawful basis you can assess for your intended use, not just for the original collection.
Under GDPR Article 6, the specific legal ground (consent, contract, legitimate interest, legal obligation, vital interest, or public task) that permits processing personal data at all; a separate requirement from purpose limitation.
One of the six legal justifications listed in GDPR Article 6(1) that must apply, per processing purpose, before personal data may be processed at all. Processing without a valid lawful basis is unlawful regardless of whether it is documented, disclosed, or well-intentioned.
The legal ground on which data is processed (for example consent, contract, legal obligation, or legitimate interest). Retention is only lawful while a valid basis persists; when the basis collapses, the data usually must be destroyed.
Where it is taught
The exact lessons this term appears in. The first 7 topics of every program are free with a free account.
- Purpose archaeology: what your data was collected FOR versus what it feeds now · Consent, Purpose, and the Law of Data, AI Data Governance: The Data Chair
- Lawful basis, spelled out: consent, contract, legitimate interest, and which one actually covers each dataset · Consent, Purpose, and the Law of Data, AI Data Governance: The Data Chair
- Row, column, and purpose: access that follows the data's sensitivity, not the org chart · Access and the Keys, AI Data Governance: The Data Chair
- The retention decision: what you must keep, what you must destroy, and proving both · Data Reality, AI Governance: Applied Mastery
- Third-party data and the vendor claims you must verify yourself · Data Reality, AI Governance: Applied Mastery
Terms it appears with
Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.