Course Features

Course Overview
When planning a new processing activity or making changes to an existing one, a critical first step is determining whether there is a valid legal reason for processing the personal data in question.
Outside data protection circles, consent is often believed to be the main justification for processing. However, consent is just one of several lawful grounds established by the UK General Data Protection Regulation (GDPR). While consent would serve as a valid legal basis for many processing activities, there are instances, such as where a power imbalance exists, in which a different legal basis may be more appropriate.
Article 6 of the GDPR states that the processing of personal data is only permitted where it meets the criteria for one of six lawful bases: consent; performance of a contract; compliance with a legal obligation; protecting the vital interests of the data subject; carrying out a task in the public interest or in the exercise of official authority vested in the controller; and legitimate interests.
This practical one-day training course is designed for compliance teams and individuals responsible for implementing new projects that involve the processing of personal data. The course aims to help participants identify the correct lawful basis for processing and understand any associated legal obligations.
