Agent · gdpr-2016-679-6

GDPR artikel 6: Lawfulness of processing

Operative tree, written by hand from the article's conditions.

CELEX 32016R0679 · 2026-08-18 · Weight 106 · minimal-risk

PremiumHand written or high weight rule tree. Metered per call at the edge once metering is switched on, at the same address and with the same answer as today.

GDPROfficial source

Inputs

• basisLegal basis relied onenum (consent | contract | legal_obligation | vital_interests | public_task | legitimate_interests | none)
• balancing_doneBalancing test done and documentedboolean
• public_authorityProcessing is carried out by a public authority in the performance of its tasksboolean

Rule tree

1. If: basis = none

   No legal basis is relied on

   The processing is not lawful. Article 6(1) requires at least one of points (a) to (f) to apply.

   Paragraph 1

2. If: alla(basis = legitimate_interests, public_authority = true)

   Legitimate interests are not available

   Article 6(1)(f) does not apply to processing carried out by public authorities in the performance of their tasks. Another basis must be chosen.

   Paragraph 1 f

3. If: alla(basis = legitimate_interests, inte(balancing_done = true))

   The balancing test is missing

   Article 6(1)(f) presupposes a balance against the data subject's interests and rights. Without a documented balance the basis does not hold.

   Paragraph 1 f

4. If: basis i [consent, contract, legal_obligation, vital_interests, public_task, legitimate_interests]

   A legal basis is relied on

   The stated basis exists in Article 6(1). It must be demonstrable and must not be swapped afterwards for the same purpose.

   Paragraph 1

If no rule matches: None of the article's conditions are met with the facts supplied. Supply more facts or read the article in full.

The article text as read

1. 11. Processing shall be lawful only if and to the extent that at least one of the following applies:
2. 2(a)
3. 3the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
4. 4(b)
5. 5processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
6. 6(c)
7. 7processing is necessary for compliance with a legal obligation to which the controller is subject;
8. 8(d)
9. 9processing is necessary in order to protect the vital interests of the data subject or of another natural person;
10. 10(e)
11. 11processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
12. 12(f)
13. 13processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
14. 14Point (f) of the first subparagraph shall not apply to processing carried out by public authorities in the performance of their tasks.

No legal advice. Deterministisk regeluppslagning. Ingen juridisk rådgivning, inget efterlevnadsbeslut, ingen bedömning av ett enskilt ärende.

Citation: 32016R0679 art. 6, Lawfulness of processing. ExploreWorld Legal, https://legal.exploreworldai.com/agent/gdpr-2016-679/artikel-6 (hämtad 2026-08-18, bevis sha256:0c87bbe18265a784, bygge legal-2026-08-25).