In order to be able to process personal data you must be able to show that you have a ‘lawful bases’ for doing so. In the laws these are called ‘conditions for processing’.
1 Consent: The data subject has consented to the processing of his or her data for one or more specific purposes.
2 Contract: The processing is necessary for –(a) the performance of a contract to which the data subject is a party; or(b) the taking of steps at the request of the data subject with a view to entering into a contract.
3 Vital interests: The processing is necessary to protect the vital interests of the data subject or any other natural person.
4 Public functions: The processing is necessary for –
(a) the administration of justice;
(b) the exercise of any functions conferred on any person by or under any enactment;
(c) the exercise of any functions of the Crown, the States or any public authority; or
(d) the exercise of any other functions of a public nature with a legal basis in Jersey law to which the controller is subject and exercised in the public interest by any person.