# Lawfulness of processing 6(f) — GDPR — provision context

> Focused context for a single provision (6(f)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-6#par-1-pnt-f
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Lawfulness of processing** (GDPR, full article: https://overview.legal/laws/gdpr/art-6).

## Provision text

### 6(f)

processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.


## Topics on this provision

- **Lawful Basis** — https://overview.legal/topics/lawful-basis-article-6
  This topic is essential as Article 6 GDPR provides the specific legal bases that determine whether processing is lawful, which is the core requirement of the 'L
- **Legitimate Interest** — https://overview.legal/topics/gerechtvaardigd-belang
  Processing necessary for legitimate interests pursued by controller or third party
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Judgment of the Court (First Chamber) of 7 December 2023.#OQ v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 22 – Automated individual decision-making – Credit information agencies – Automated establishment of a probability value concerning the ability of a person to meet payment commitments in the future (‘s** (case-law) — https://overview.legal/posts/132279
- **LG Rostock - 3 O 762/19** (case-law) — https://overview.legal/posts/122848
- **BVwG - W292 2270002-1** (case-law) — https://overview.legal/posts/109002
- **Judgment of the Court (Fourth Chamber) of 7 March 2024.#IAB Europe v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Standard-setting sectoral organisation proposing to its members rules on the processing of users’ consent – Article 4(1) – Concept of ‘personal data’ – String of letters and characters ca** (case-law) — https://overview.legal/posts/132270
- **German Supreme Court: No GDPR basis for debt transmission to credit agency; €500 damages** (case-law) — https://overview.legal/posts/53895
- **Judgment of the Court (Fifth Chamber) of 17 June 2021.#Mircom International Content Management & Consulting (M.I.C.M.) Limited v Telenet BVBA.#Request for a preliminary ruling from the Ondernemingsrechtbank Antwerpen.#Reference for a preliminary ruling – Intellectual property – Copyright and related rights – Directive 2001/29/EC – Article 3(1) and (2) – Concept of ‘making available to the public’ – Downloading of a file containing a protected work via a peer-to-peer network and the simultaneous** (case-law) — https://overview.legal/posts/132322
- **USR - Us I-755/2025-8** (case-law) — https://overview.legal/posts/49225
- **Meta Platforms v noyb** (case-law) — https://overview.legal/posts/51484
- **OLG Köln - 15 W 55/26** (case-law) — https://overview.legal/posts/53657
- **Judgment of the Court (First Chamber) of 13 November 2025.#Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).#Request for a preliminary ruling from the Curtea de Apel Bucureşti.#Reference for a preliminary ruling – Processing of personal data and the protection of privacy in the electronic communications sector – Directive 2002/58/EC – Article 13(1) and (2) – Unsolicited communications – Concept of communication ‘for the purposes of di** (case-law) — https://overview.legal/posts/132132
- **FTT: NMC should have neither confirmed nor denied holding struck-off nurse's personal data** (case-law) — https://overview.legal/posts/53656
- **GHARL - 200.256.426** (case-law) — https://overview.legal/posts/122859

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-6#par-1-pnt-f · 2026-08-22