Public Interest or Official Authority as Legal Basis, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(e).
Assessment Step
1
Public Interest or Official Authority as Legal Basis (PublicInterestorOfficialAuthorityasLegalBasis)
Does the entity ensure that personal data is processed lawfully where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
Public Interest or Official Authority as Legal Basis
The data controller must ensure that personal data is processed lawfully where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Citation
GDPR
Art. 6(1)(e), Recital 45
|