Lawful processing

A key principle in the GDPR is that data controllers need to process personal data lawfully, fairly and transparently.

Like the Data Protection Act 1998, the GDPR sets out the list of lawful justifications for processing - often referred to as the “conditions for processing”. But what is new under the GDPR is an explicit obligation to tell people the legal basis for processing their personal data. So you now have to document and communicate this. 

Another reason for needing to be clear about your lawful basis for processing personal data is that it affects the extent to which the individual can limit that processing. For example, if you are lawfully processing someone’s personal data because it is necessary for the performance of their employment contract, then they do NOT have the right to object to that processing.

Main contacts

Contact one of our lawyers to discuss your GDPR concerns.

Mills & Reeve Sites navigation
A tabbed collection of Mills & Reeve sites.
My Mills & Reeve navigation
Subscribe to, or manage your My Mills & Reeve account.
My M&R
Register or login

Register or login Get all the benefits of MyM&R but registering or logging in ulla vehicula mauris mattis hendrerit fermentum. Etiam placerat hendrerit dapibus. Praesent ligula felis, eleifend sed odio quis, feugiat eros. Aliquam vitae felis fermentum, posuere nulla ut, maximus magna.

Staff intranet
Log in to the intranet
Client extranet
Log in to the extranet