Legal Basis for Processing
Specify the lawful grounds for each type of data processing.
GDPR Lawful Bases
Coming SoonGDPR support is coming soon. Currently, our platform fully supports DPDPA (India) compliance.
Under GDPR, every processing activity must have a lawful basis:
Consent (Article 6(1)(a))
The individual has given clear consent for you to process their personal data for a specific purpose.
Use for: Marketing emails, analytics cookies, non-essential tracking
Contract (Article 6(1)(b))
Processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
Use for: Order processing, account creation, service delivery
Legal Obligation (Article 6(1)(c))
Processing is necessary for you to comply with the law.
Use for: Tax records, employment law compliance, legal requests
Vital Interests (Article 6(1)(d))
Processing is necessary to protect someone's life.
Use for: Medical emergencies, safety-critical situations
Public Task (Article 6(1)(e))
Processing is necessary for you to perform a task in the public interest or for official functions.
Use for: Government agencies, public authorities
Legitimate Interests (Article 6(1)(f))
Processing is necessary for your legitimate interests or the legitimate interests of a third party, unless overridden by the individual's rights.
Use for: Fraud prevention, network security, direct marketing (B2B)
DPDPA Lawful Bases (India)
Available NowDPDPA primarily relies on consent with certain exemptions:
Consent
Primary basis under DPDPA. Must be free, specific, informed, and unambiguous.
Certain Legitimate Uses
Specific situations where consent is not required (e.g., compliance with law).
Mapping Data to Legal Basis
For each processing activity you defined, select the appropriate legal basis:
| Activity | Typical Legal Basis |
|---|---|
| Processing purchases | Contract |
| Sending marketing emails | Consent |
| Website analytics | Consent or Legitimate Interest |
| Fraud detection | Legitimate Interest |
| Tax record keeping | Legal Obligation |
Important Note
If you rely on consent, individuals have the right to withdraw it at any time. If you rely on legitimate interest, you must document your assessment. Choose the most appropriate basis for each activity.