Lawfulness of processing

The condition for lawfulness of processing is what legally authorises its implementation and grants the applicant entity or applicant the right to process personal data.

For the processing of personal data to be lawful, it must be based on at least one of the six lawfulness conditions set out in Article 6 of the GDPR. An applicant or aaplicant entity must indicate the lawfulness condition on which it wishes to rely when processing personal data in the ETS (e.g. Article 6(1)(e) for public entities).