- The data subject has given consent to the processing.
- The processing is necessary—
- for the performance of a contract to which the data subject is a party or
- in order to take steps at the request of the data subject prior to entering into a contract.
- The processing is necessary for compliance with a legal obligation to which the controller is subject, other than an obligation imposed by contract.
- The processing is necessary in order to protect the vital interests of the data subject or of another individual.
- The processing is necessary—
- for the administration of justice,
- for the exercise of any functions of either House of Parliament,
- for the exercise of any functions conferred on a person by an enactment or rule of law,
- for the exercise of any functions of the Crown, a Minister of the Crown or a government department, or
- for the exercise of any other functions of a public nature exercised in the public interest by a person.
-
- The processing is necessary for the pus of legitimate interests pursued by—
- the controller, or
- the third party or parties to whom the data is disclosed.
- Sub-paragraph (1) does not apply where the processing is unwarranted in any particular case because of prejudice to the rights and freedoms or legitimate interests of the data subject.
- In this paragraph, “third party”, in relation to personal data, means a person other than the data subject, the controller or a processor or other person authorised to process personal data for the controller or processor.