Legal Foundations

A fundamental requirement, to be established prior to any processing, is that it is lawful. There are several different legal foundations under the GDPR but not all are suitable or relevant for data processing activities within the OPCC. This guide sets out the reasoning behind this, and how to ensure compliance in this respect.