Section 7: Certain legitimate uses

What Section 7 says, in plain English

Six situations where consent is not required: voluntary provision (7a), performance of law (7b), medical emergency (7c), employment (7d), disaster response (7e), and specific state functions. Narrow list, strictly read.

What it means for you

Do not treat 7(a) 'voluntary provision' as a catch-all. The data principal must actually volunteer the data for the specified purpose, unprompted.

How this is operationalised in dcomply

The RoPA module tags each activity with its lawful ground. If you claim Section 7, the record shows which limb and why.