EU regulatory register · EUDPR
Article 5Lawfulness of processing
CELEX 32018R1725 · Read on 2026-08-18
When may an EU institution process personal data under Regulation 2018/1725?
Under Article 5 of Regulation (EU) 2018/1725, EU institutions and bodies may process personal data only when at least one condition applies: it is necessary for a task in the public interest or the exercise of official authority, for a legal obligation, for a contract with the data subject, the data subject has consented, or it protects someone's vital interests.
EUR-Lex · Source: NovaCopilot
Short answer
1. Processing shall be lawful only if and to the extent that at least one of the following applies:
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/institutions-2018-1725/artikel-5 · Short answer as data · Official text
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. Processing shall be lawful only if and to the extent that at least one of the following applies:
(a)
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body;
(b)
processing is necessary for compliance with a legal obligation to which the controller is subject;
(c)
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
(d)
the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
(e)
processing is necessary in order to protect the vital interests of the data subject or of another natural person.
2. The basis for the processing referred to in points (a) and (b) of paragraph 1 shall be laid down in Union law.
Follow-up questions
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit