Explains the lawful bases for processing
GDPR Art. 6(1): consent, contract, legal obligation, vital interests, public task, legitimate interest; consent is not the basis where the bank must process anyway (e.g. creditworthiness under consumer credit law).
Can AI do this?
AI does this well Most of the tested AI models master this. 4 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 100% | Mastered |
| gemini-3.5-flash-lite | Low cost | 100% | Mastered |
| gpt-6-luna | Low cost | 100% | Mastered |
| claude-haiku-5-5 | Low cost | 100% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: GDPR Art. 6(1): consent, contract, legal obligation, vital interests, public task, legitimate interest; consent is not the basis where the bank must process anyway (e.g. creditworthiness under consumer credit law).
How it is assessed: Answers a written question on the lawful bases correctly
Related knobits
Builds on
Needed for
- G-532 Raises a decision for its owner instead of taking it
- S-401 Recognises a wrong or missing lawful basis
- S-408 Recognises further use with no compatibility assessment
- S-431 Re-bases a processing purpose on the lawful basis the bank relies on
All 19 knobits of Record processing activities and assess privacy impact.
Source: Practice the stage 4 reference and review checklist rest on