The legal bases for lawful data processing are set out in Art. 7. The structure differs from that of the GDPR in such a way that, in principle, consent must be obtained for processing unless another legal basis (the same as in the GDPR) applies.
- 7 2° restricts Art. 6 (1)(d) GDPR (vital interests) in such a way that it only applies to saving the life of the data subject.
- 7 5° extends the scope of application of Art. 6 (1)(f) (legitimate interest) GDPR by deleting the inapplicability to public bodies provided for in the GDPR.
- Art. 7-1 reduces the age for consent to 15 years.
