Lawful basis
One of the six grounds UK GDPR requires for processing personal data: consent, contract, legal obligation, vital interests, public task or legitimate interests. You need one for each purpose, including using personal data with an AI tool, and should record which you rely on.
Related terms
A statement agreed at the AI Safety Summit hosted by the UK at Bletchley Park on 1 and 2 November 2023, in which count…
Computer-generated worksA category in UK copyright law for works generated by computer with no human author, where the author is treated as th…
ControllerUnder UK GDPR, the organisation that decides why and how personal data is processed, and carries primary responsibilit…
Council of Europe AI ConventionThe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law, the first legally…
Data (Use and Access) Act 2025A UK Act that received Royal Assent on 19 June 2025 and amends UK GDPR and related law, including the rules on automat…
Data Protection Act 2018The UK statute that sits alongside UK GDPR, adding exemptions, rules on law enforcement and intelligence processing, a…
Knowing the word is the easy part
A short assessment scores you across five skill areas and builds a path through 18 modules, skipping whatever you already know. Free, no card.
Find your level