In order for processing to be lawful, personal data should be processed on the basis of the necessity for the performance of a task carried out in the public interest by Union institutions and bodies or in the exercise of their official authority, the necessity for compliance with a legal obligation to which the controller is subject or some other legitimate basis under this Regulation, including the consent of the data subject concerned, the necessity for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Chun an phróiseáil a bheith dleathach, ba cheart sonraí pearsanta a phróiseáil ar an mbonn gur gá d’institiúidí agus comhlachtaí an Aontais cúram a chur i gcrích ar mhaithe le leas an phobail nó i bhfeidhmiú a n-údaráis oifigiúil, ar bhonn riachtanas maidir le hoibleagáid dhlíthiúil a chomhlíonadh a dtagann an rialaitheoir faoina réir nó bonn dlisteanach éigin eile faoin Rialachán seo, lena n-áirítear toiliú an ábhair sonraí lena mbaineann, riachtanas maidir le conradh a chomhlíonadh ar páirtí ann an t-ábhar sonraí nó ionas go ndéanfar bearta arna iarraidh sin ag an ábhar sonraí sula ndéanfar conradh.