Lawful Basis is the legal reason for processing data under GDPR.

Key Points:
1) Six valid bases
2) Consent is one
3) Choice depends on purpose.

A hospital uses “vital interests” as lawful basis, while also supporting Right to Data Portability.