The Irish data protection authority (DPC) has updated its guidance on the legal bases for processing personal data. According to IAPP, the guidance focuses on data processing under the EU General Data Protection Regulation; however, it also covers data-processing requirements under the EU Law Enforcement Directive. The aim of this guidance is primarily to assist controllers in identifying the correct legal basis for any processing of personal data which they undertake and the obligations which go with that legal basis. Additionally, this guidance also assists those individuals whose personal data may be processed in identifying whether the processing of their personal data is lawful.