Lawful Bases for Processing Personal Data

Wishlist Share

About Course

Every use of personal data needs a lawful basis under the UK GDPR. This course explains the seven lawful bases, including the new “recognised legitimate interest” added by the Data (Use and Access) Act 2025, and shows how to choose and record the right one.

This course gives general information about UK law and official guidance as at October 2026. It is not legal advice. Laws and guidance change, so check the current official sources listed, or take professional advice, before acting in a specific case.

What Will You Learn?

  • Name the seven lawful bases and what each one covers Understand why consent is not always the best choice Apply the three-part test for legitimate interests Know the extra condition needed for special category data

Course Content

Course Lessons

  • Why you need a lawful basis
  • The seven lawful bases
  • Choosing and recording the right basis

Sources & Further Reading
The official guidance this course is based on.

Final Assessment

Student Ratings & Reviews

No Review Yet
No Review Yet

Want to receive push notifications for all major on-site activities?

✕