Laws · GDPR ·art-6-par-1-pnt-c EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
processing is necessary for compliance with a legal obligation to which the controller is subject;
How it connects
Cited by
- Guidelines 02/2024 on Article 48 GDPR
- Guidelines 05/2020 on consent under Regulation 2016/679
- Guidelines 01/2022 on data subject rights - Right of access
- Guidelines 3/2019 on processing of personal data through video devices
- Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications
All 78
- Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR
- hier
- Study on the secondary use of personal data in the context of scientific research
- EDPB Annual Report 2024
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Guidelines 3/2025 on the interplay between the DSA and the GDPR
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- Meta Platforms v noyb
- FTT allows appeal: NMC should have neither confirmed nor denied holding nurse's data
- Can the GPC standard eliminate consent banners in the EU?
- Generative AI and data protection
- CJEU - C‑474/24 - NADA Austria and Others
- Garante per la protezione dei dati personali (Italy) - 471/2026
- Garante per la protezione dei dati personali (Italy) - 10192784
- Austrian court: university may refuse GDPR rectification of student's chosen name without
- DSB Austria: Restaurant contact-tracing data collected for COVID-19 qualifies as health
- DPC (Ireland) reprimands Kildare County Council over surveillance tech and CCTV compliance
- GHAMS - 200.324.736/01
- DPA need not assess law's constitutionality or GDPR proportionality, only legal basis
- Rb. Midden-Nederland - UTR 21/3403
- Statement 1/2025 on Age Assurance
- Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse
- EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space
- EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- Statement 03/2021 on the ePrivacy Regulation
- Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects
- Opinion 3/2019 concerning the Questions and Answers on the interplay between the Clinical Trials Regulation (CTR) and the General Data Protection regulation (GDPR)
- L. H. v Ministerstvo zdravotnictví
- Amt der Tiroler Landesregierung v Datenschutzbehörde
- Agentsia po vpisvaniyata v OL
- OQ v Land Hessen
- Gesamtverband Autoteile-Handel e.V. v Scania CV AB
- Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd v European Commission
- Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd v European Commission
- European Commission v Republic of Poland
- SIA 'SS' v Valsts ieņēmumu dienests
- European Commission v Republic of Poland
- European Commission v Republic of Poland
- Deutsche Post AG v Hauptzollamt Köln
- W. P. Willems and Others v Burgemeester van Nuth and Others
- General-Purpose AI under the EU AI Act: A Conceptual Allocation of Duties across the Value Chain
- Garante per la protezione dei dati personali (Italy) - 457/2026
- NAIH (Hungary) - NAIH-11443-3/2026
- CJEU C-312/24 Darashev: Data subject's right to erasure of criminal investigation data
- Supreme Court - III CZP 78/19
- OLG München - 36 U 1054/25 e
- HDPA (Greece) - 7/2026
- Garante per la protezione dei dati personali (Italy) - 462/2026
- NAIH (Hungary) - NAIH-450-7-2026
- Austrian VwGH: hotel listings and user reviews on travel platform serve legitimate
- DSB (Austria) - 2021-0.643.804
- Bulgarian SAC: criminal record check for bank counsel role lawful under GDPR Art. 6(1)(c)
- BVwG - W214 2235505-1
- UODO reprimands mayor for disclosing data subject's data to company without legal basis
- EWCA (UK) - 2026 EWCA Civ 1130
- Persónuvernd (Iceland) - 2025010364
- Garante per la protezione dei dati personali (Italy) - 551/2026
- CJEU - C-798/24 - Jautiva
- BVwG - W292 2298015-1
- Italian DPA finds Ministry of Education's disclosure of disciplinary dismissal excessive
- BVwG - W298 2314952-1
- Italian DPA: Municipality of Rieti breached GDPR by publishing 31,000 taxpayers' waste
- Municipality of Sciacca: Insufficient legal basis for data processing
- Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento: Insufficient legal basis for data processing
- Garante: Bologna University Hospital rightly refused erasure of recruitment ranking data
- Persónuvernd: Icelandic Farmers’ Association breached GDPR by disclosing owner data to
- Italian DPA: Municipality of Aprilia unlawfully disclosed whistleblower data to employer
- Finnish DPA orders Espoo to ensure pupil data protection in Google learning tools
- Icelandic DPA: City of Reykjavik cannot request bank statements from NPA disabled service