Data Protection Training - post event version

You will need one of the

You will need one of the 6 LAWFUL BASES + one of the CONDITIONS belowAdditional requirements to process special category personal dataYou will need one of the 6 LAWFUL BASES + one of the CONDITIONS belowCommonly used conditions inemployee / employer context• Explicit consent: data subjecthas given explicit consent• Legal claims: processing isrequired for the purpose ofdefending a legal claim• Employment law rights andobligations: where you arecomplying with a specificemployment law or obligationAdditional conditions• Protection of vital interests: to protect vital interest of data subject, or another person,where the subject cannot give consent• Foundations, associations or other not-for-profit bodies: where processing is carriedout, with safeguarding at mind, for the purpose of the entity’s aim. The personal datacannot be shared externally without the data subject’s consent and the processing mustonly relate to members or former members of the body• Made public by the data subject: the personal data has clearly been made public by thedata subject themself• Substantial public interest: processing is necessary for reasons of substantial publicinterest. The substantial public interest conditions are set out in Part 2 of Schedule 1 ofDPA 2018, one of these will need to be met also• Health purposes: processing is required for medical assessments, diagnoses, provisionof treatment and provision of health or social care• Public health: for reasons concerning protection of public health• Archiving, research and statistics: processing is necessary for any of these purposesin the public interest based on domestic law

Information Commissioner’s Office