Learning 2 – Principles and lawful processing
Completion requirements
1. Section 2: Principles and lawful processing
Section 2: Principles and lawful processing
The rules that determine whether personal data may be used and how it must be managed.
Learning outcomes
By the end of this section, you should be able to:
- explain and apply the seven data protection principles;
- identify the seven Article 6 lawful bases;
- explain why consent is not automatically the best lawful basis;
- describe the additional requirements for special category data; and
- document a reasoned lawful-basis decision.
The principles describe the standard of behaviour expected throughout the data lifecycle. A lawful basis provides the legal justification for a particular processing purpose. Both are required.
Decision rule: Choose the lawful basis that best reflects the real purpose and relationship before processing begins. Do not select consent merely because it sounds safe.
Official reference points
- ICO: A guide to the data protection principles
- ICO: A guide to lawful basis
- ICO: Recognised legitimate interest
- ICO: Special category data
Legal accuracy: reviewed against official UK sources on 14 July 2026. This learning content is educational and is not a substitute for case-specific legal advice.