A lawful basis allowing personal data to be processed when it is necessary to comply with a legal duty the organisation is subject to, such as tax or employment law (Article 6(1)(c)).