Hi,
I think that there can be more than one processing condition and that the GDPR is not written solely for the public sector. For instance Councils in Scotland can't do anything unless it has a statutory function to do so as a basis. However that may not be the most appropriate processing condition to use. We have adopted the following a s a rule of thumb
1) if we have an obligation to do something regardless to whom the obligation is owed - then it's legal obligation (this obligation can be public sector only such as Council Tax or apply to the private sector as well such as health and safety obligations
2) if we have the discretionary power to do something and the processing is necessary for that function - statutory function
3) if we are processing the personal data through an agreement with the data subject - with conditions on the data subject, then it is contract.
An example is employees. We have a function to have employees but the processing of information about employees goes into additional services such as occupational health, counselling etc. - these are not necessary for the statutory function from which the power came. However, they are necessary in connection with the contract of employment and so we would use contract as the processing basis.
Regards
Bill Dunn
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|