The processing of personal data by the employer has always to be based on a legal ground, normally performance of a contract, compliance with a legal obligation or for the purposes of the legitimate interest pursued by the employer, except where such interest are overridden by the interest or fundamental rights of the worker.
Darbuotojo asmens duomenis darbdavys gali tvarkyti tik tam turėdamas teisinį pagrindą, paprastai - vykdant sutartį, laikantis teisinės prievolės ar tenkinant teisėtus darbdavio interesus, išskyrus tuos atvejus, kai šie interesai pažeidžia darbuotojo interesus ar jo pagrindines teises.