# DPC GDPR Personal Data (Legal Basis)

> Personal data for DPC self-assessment: consent (Art. 7–9), children (Art. 8), and legitimate interest assessment.



Tags: DPC, GDPR, Ireland, Compliance, Consent


## Example Prompts

- Review our consent mechanisms for the DPC checklist
- Draft a legitimate interest assessment for our processing
- Document procedures for children's data and age verification

URL: https://rakenne.app/skills/dpc-gdpr-personal-data/index.md

Try this skill: https://rakenne.app/a/?skill=dpc-gdpr-personal-data



## Overview

Personal data for DPC self-assessment: consent (Art. 7–9), children (Art. 8), and legitimate interest assessment.

## Getting Started

Add your source materials to the project workspace, then activate the *DPC GDPR Personal Data (Legal Basis)* skill. The agent will guide you through the process step by step.

## Example conversation

**You:** We're not sure our consent is GDPR-standard, and we use legitimate interest for some B2B marketing. We need either a consent review or a proper legitimate interest assessment.

**Agent:** I'll use the personal data reference (consent Art. 7–9, children Art. 8, legitimate interest). For consent: I'll checklist whether it's freely given, specific, informed, and a clear affirmative action; whether you can demonstrate it; and withdrawal. If you have children's services, I'll add age verification and parent/guardian consent. For legitimate interest: I'll draft an LIA—identified interest, necessity of the processing, and balance against the individual's rights—so you have a documented basis. I won't decide for you; I'll produce the analysis and wording you can adopt or adapt.

## Output excerpt

### Legitimate interest assessment (excerpt) — B2B marketing

**Interest** — Promoting our B2B services to business contacts who have a relevant role (e.g. decision-makers in our target segment).

**Necessity** — Processing (storing contact details and sending relevant B2B communications) is necessary to pursue that interest; we do not rely on consent for this B2B channel.

**Balance** — Contacts are business (not consumer) data; we use limited data (name, role, company, email); we provide clear opt-out in every email and in our notice; we do not send high-frequency or intrusive messaging. We have weighed this against the individual's interests and conclude the balance is in favour of the controller for this B2B context.

**Conclusion** — Legitimate interest (Art. 6(1)(f)) is an appropriate legal basis for this processing, subject to honouring objections and keeping the LIA under review.

---

*For consent-based processing: use a checklist (freely given, specific, informed, affirmative action, demonstrable, withdrawal) and, for children's services, age verification and parent/guardian consent (e.g. Ireland age 16).*

## Extension and validation

This skill does not include custom validation tools. Elaboration is guided by the skill workflow and reference materials. You can add tools in `extension.ts` later (e.g. to check required sections or checklist coverage) if you want automated validation.


---

Back to [Skill Library](https://rakenne.app/skills/index.md)