Unverified Commit f8dd69db authored by aeris's avatar aeris Committed by berumuron
Browse files

Document lawfullness

parent 5673a97f
Pipeline #495390 passed with stage
in 11 seconds
......@@ -42,9 +42,16 @@ A purpose block has two required keys:
- `purpose`: a free string value used to describe the purpose of the data
- `lawfulness`: a string value giving the legal basis for the processing. Its
value MUST be one of the following: consent, contract, legal, public
interest, legitimate interest, vital.
- `lawfulness`: a string value giving the legal basis for the processing.
Lawfulness MUST be one of the [GDPR article 6(1) legal basis](https://www.privacy-regulation.eu/en/6.htm):
* `consent`: freely given, specific, informed and unambiguous **consent** ([EDPB guidelines](https://edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf))
* `contract`: processing is required for performance of a **contract** ([EDPB guidelines](https://edpb.europa.eu/sites/default/files/consultation/edpb_draft_guidelines-art_6-1-b-final_public_consultation_version_en.pdf))
* `legal`: processing is required for compliance with **legal** obligation (e.g. system logs, PCI-DSS…)
* `vital`: processing is required for **vital** interests of the data subject (e.g. medical record…)
* `public interest`: e.g. health public research, scientific study…
* `legitimate interest`: e.g. debug, marketing metrics… ([EDPB guidelines](https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2014/wp217_en.pdf))
### Data block
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment