The ICO exists to empower you through information.

Overall ratings

Consent 

Contract

Legal obligation

Vital interests

Public task

Legitimate interests

The below lawful basis are likely to be appropriate for your data processing activities

Your answers were inconclusive for the following lawful basis

Legal obligation: Your answers were inconclusive - you need more information to decide whether legal obligation is an appropriate lawful basis.

 

Suggested actions

You may need to obtain legal advice to determine if you are subject to any relevant legal obligations.

Public task: Your answers were inconclusive - you need more information to decide whether public task is an appropriate lawful basis.

 

Suggested actions

You may need to obtain legal advice to determine if you are exercising official authority or have a relevant task in the public interest.

Consent: Your answers were inconclusive - you need to do more to make sure you have valid consent.

Suggested actions

You need to consider whether consent suits your needs. Relying on consent can build customer trust and engagement, and enhance your reputation - but you hand control over to individuals which means you must make sure you can offer people a genuine free choice and ongoing control over whether you use their data, and will respect their choices. Refer to our detailed consent guidance to decide if consent is appropriate for you.

Legitimate interest: Your answers were inconclusive - you need more information to decide whether legitimate interests is appropriate.

Suggested actions

If you intend to rely on legitimate interests you need to be confident to take on the responsibility for protecting the interests of the individual and justifying any impact. If you are not confident, you should look for another lawful basis or rethink your processing. For example, you may wish to consider whether you would prefer to give individuals the choice, and rely on consent instead.

The lawful basis below are not appropriate for your data processing activities

Contract: Your answers indicate that contract is not an appropriate lawful basis.

 

Suggested actions

You need to show that you are using the data to provide a service to the individual at their request. If this is not the case, you should look for another lawful basis for this processing that better reflects your purposes.

Vital interest: Your answers indicate that vital interests is not an appropriate lawful basis.

 

Suggested actions

You should look for another lawful basis for this processing.

 

If you have an problem downloading the report into a word document please let us know.