Lawfulness of processing

Processing of personal data shall be undertaken ‘lawfully’. To show the processing is being undertaking lawfully one of the following conditions should apply (unless an exemption applies):

  1. You have given clear consent to the processing of your personal data for one or more specific purposes; (for example giving us your details to help with research work on children’s services or a university retaining personal data for alumni purposes):
  2. Processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. (For example if you purchase goods from an online shop to be delivered then the shop will need to process your personal details to allow them to perform the contract and deliver the goods to you);
  3. Processing is necessary for compliance with a legal obligation to which the Trust is subject. (For example, information from accident reports require processing for health and safety records);
  4. Processing is necessary to protect your vital interests or the vital interests of another natural person. (For example, if a child is admitted to A & E following an  accident, then the disclosure to the hospital of the individuals medical history may be necessary in order to protect his/her vital interests);
  5. Processing is necessary for the performance of a public task carried out in the public interest or in the exercise of official authority vested in the Trust (For example, safeguarding of children and young people. This includes most of the Trusts functions which comes from various pieces of legislation ) and
  6. Processing is necessary for the purposes of the legitimate interests. (For example a the Trust’s employee training records when unrelated to the performance of a public task);