Article 6 - Lawfulness of processing

Article 6 defines the legal bases that must exist for personal data to be processed lawfully under the GDPR. It lists six conditions-consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a public task, and legitimate interests-any one of which must apply for processing to be permissible.