Back to News List


New GDPR Guide - Legal Grounds for Data Processing

February 19th, 2018

In order to process personal data market researchers and data analysts must have a ‘legal basis’ for doing so. This guidance explains the some of the legal bases that will be available to us under GDPR.

The GDPR applies to anyone who is collecting, storing and processing the personal data of EU residents i.e. data controllers and data processors, who will be required to demonstrate that they process personal data in compliance with the GDPR. 

The BHBIA is providing a series of resources to help members prepare.

The latest guide: 'Legal Grounds for Data Processing' explains that within the GDPR there are six lawful bases for processing personal data - of which two are likely to be used regularly for commercial market research (MR) and data analytics (DA):

  • Consent
  • Legitimate interests

The guide explains what you need to consider when deciding whether it is appropriate to use these grounds as the legal bases for your data processing.

The GDPR is going to make a difference to how all those involved in market research and data analytics handle personal data.  With its introduction only 3 months away, now is the time to make sure your are prepared!

View and download the series of GDPR Guides

Date for your diary:

GDPR Update webinar - 23rd March (full BHBIA members only)

The BHBIA Ethics & Compliance Committee will be running a one-hour webinar to give members an update on the latest guidance, and this will include a discussion of the legal grounds for data processing and an opportunity to ask questions.

If you can't make the date, a recording will be available.