Lawful Basis refers to the legal justification required under the General Data Protection Regulation (GDPR) for processing personal data. Organizations must identify and document at least one lawful basis before collecting, storing, or using personal data. The main lawful bases include consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task carried out in the public interest or in the exercise of official authority, and legitimate interests pursued by the data controller or a third party. Selecting the appropriate lawful basis is crucial for ensuring data processing activities are legal and compliant with privacy regulations.