Does my choice of lawful bases affect the rights patients have over their data? 22nd July 2018 Yes. Depending on the lawful basis that you rely upon for GDPR purposes, different individual rights will be relevant. There are six lawful bases on which you can choose to rely. These are set out below together with the relevant individual rights.