GDPR-6-10 Requirement 6 — Lawfulness of processing

Consider processing consequences in compatibility assessment

Description

Controllers must consider the possible consequences of the intended further processing for data subjects when assessing processing compatibility.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Ensure lawful basis for processing

Prohibition on legitimate interests basis for public authorities

Establish legal basis in Union or Member State law for legal obligation/public task

Determine processing purpose in legal basis

Ensure legal basis meets public interest objective and proportionality

Conduct compatibility assessment for further processing

Consider purpose linkage in compatibility assessment

Consider collection context in compatibility assessment

Consider data nature in compatibility assessment

Consider safeguards existence in compatibility assessment

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started