The Data Protection Network has published Guidance on Legitimate Interests under the the EU General Data Protection Regulation.
The Guidance, published in July 2017, is a practical tool to help commercial and not-for-profit organisations assess whether or not they can rely on Legitimate Interests as a lawful basis for processing personal data under the GDPR.
The Guidance has been made possible by contributions from the Direct Marketing Association, ISBA and representatives of some of the largest companies and institutions in the UK. It will be kept under review, updated as necessary and we welcome any feedback to help develop further versions.
The Guidance covers:
- Understanding what Legitimate Interests are
- Identifying areas of processing where Legitimate Interests may apply
- The Legitimate Interests Assessment (LIA) – the 3 stage test
- Transparency and the consumer
Please login or sign up to download the DPN Legitimate Interests Guidance (it’s free to sign up)
The information provided and the opinions expressed in this document represent the views of the Data Protection Network. They do not constitute legal advice and cannot be construed as offering comprehensive guidance to the Data Protection Act 1998 or other statutory measures referred to in the document.