Conditions for processing personal data

To comply with the first data protection principle, the processing must meet a "condition" for processing. It would contravene the first principle to collect and process personal data without meeting at least one of the conditions.

The conditions for processing personal data are set out in Schedule 2 and Schedule 3 to the Act.  

An organisation must meet at least one condition for processing personal data set out in Schedule 2.

In the case of the processing of "sensitive personal data", a condition set out in Schedule 3 must also be met.

Schedule 2 conditions

In summary these are:

  1. in relation to a contract which the individual has entered into
  2. because the individual has asked for something to be done so they can enter into a contract
  3. because of a legal obligation that applies to the organisation (except an obligation imposed by contract)
  4. to protect an individual's "vital interests" i.e. life and death circumstances
  5. in the legitimate interests of the organisation so long as the rights and freedoms of the data subjects are not prejudiced;
  6. where the processing is necessary for the administration of justice;
    • for the exercise of any functions of Tynwald, the Council or the Keys;
    • for the exercise of functions conferred by or under a statutory provision;
    • for the exercise of any functions of the Crown, a Department or Statutory Board
    • for the exercise of any other functions of a public nature exercised in the public interest.

Schedule 3 conditions

These conditions are more exacting, but if there is a legitimate reason to process personal data, then it will be relatively straightforward to identify which condition for processing is met.

The following is a summary of the conditions for processing sensitive personal data. However, it is only intended as a basic guide and any data controller who processes sensitive personal data should refer directly to Schedule 3 of the Act for a full description of all the conditions.

In summary:

or it is necessary

Find out more about "consent"