First Principle

• Consent
• Fulfill a Contract
• Legal Obligation
• Protect vital interests
• Public functions
• Legitimate Interests

• Race
• Sex life/sexual orientation
• Politics
• Religion
• Health
• Trade Union
• Criminal Record
• Current criminal proceedings

• Explicit consent
• Employment rights/obligations
• Vital interests
• Legitimate union/religious/club use
• In public domain
• Public functions
• Legal Proceedings
• Health Professional

Lawfulness in case of public authority requires consideration of statutory powers under which data obtained and for which to be used

Unlawful to use information obtained for one statutory function for the purposes of another unless specific authority to do so

Fairness requires, generally, that data subjects must not be misled as to the purpose for which data is obtained and must be told who is holding it and for what purpose

In principle it is possible to comply withthe fairness requirement by giving a notice to the data subject

- the identity of the data controller and their representative if nominated

- the purpose for which the data is processed

- any further information necessary

When data is obtained from a third party and providing it represents disproportionate effort

OR

You are under a legal obligation to process the data

• Fair Processing Notice
• Subject Access Request

(Opt-in is the preferred method)

At the point of collection or as soon as practically possible after that

Larbey v NW Bank?

payroll details were given to a third party(unable to find more details)