The Gibraltar Regulatory Authority has today released it's sixth guidance note on GDPR.

"The General Data Protection Regulation (the "GDPR") came into force on the 25th May 2018, replacing the existing data protection framework under the EU Data Protection Directive. This is the sixth of a series of Guidance Notes that the Gibraltar Regulatory Authority ("GRA"), as the Information Commissioner, has issued. To collect and use personal data legitimately under the GDPR and the Data Protection Act 2004 ("DPA"), organisations need to have a 'lawful basis'. This Guidance Note provides general guidance on the the lawful bases that are available for organisations to rely on, in a practical and concise manner."

To read the guidance note, click the following link: GDPR Guidance Note - 'the legal basis'

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.