Published: January 2023Click To View (PDF)

This chart provides a refresher on the six bases for lawful processing under Article 6 of the EU General Data Protection Regulation. Given the fines levied in January 2023 by the Irish Data Protection Commission against Meta Ireland, the chart explains the scope of the Article 6 lawful bases for processing, further considerations for determining when each applies, relevant recitals, additional IAPP guidance and resources from supervisory authorities.