Lawful basis
One of the six grounds in the GDPR that make processing personal data lawful, of which consent is only one.
A lawful basis is one of the six grounds set out in the GDPR that make processing personal data lawful: consent, contract, legal obligation, vital interests, public task and legitimate interests. A firm must identify the basis for each purpose before processing, and the choice affects which rights the person has. Many agent features rely on contract or legitimate interests rather than consent, which is why consent is not automatically the right basis.
Agent Minute explains this term on 4 November 2026.
Related terms
ConsentA freely given, specific, informed and unambiguous indication of a person's agreement to the processing of their data.Personal dataAny information relating to an identified or identifiable living person.Purpose limitationCollecting personal data for specified, explicit and legitimate purposes and not reusing it in incompatible ways.Authorized third partyUnder the US data rights rule, a third party that has met the authorisation procedure to access a consumer's data.