Legal basis is another term used for "lawful basis." Under the GDPR, a lawful or legal basis is a valid purpose for processing personal data. The GDPR offers 6 lawful/legal bases.