Public Interest or Official Authority as Legal Basis, v1.0

Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(e).

Assessment Step

1
Public Interest or Official Authority as Legal Basis (PublicInterestorOfficialAuthorityasLegalBasis)
Does the entity ensure that personal data is processed lawfully where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (1)

Public Interest or Official Authority as Legal Basis
The data controller must ensure that personal data is processed lawfully where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Citation
GDPR
Art. 6(1)(e), Recital 45