On 11 July, the Data Protection Network (DPN) issued specific guidance on how companies can rely on the “legitimate interests” basis for processing personal data under GDPR. The publication comes as a welcome addition to the slowly available information from the Information Commissioner’s Office.
The DPN’s guidance gives businesses a useful starting tool for understanding exactly how, when and why they will be able to use legitimate interests as a legal basis for processing data, providing 25 valuable examples which cross over multiple industries.
Download the DPN Legitimate Interests Guidance here. (Registration required)
Consistent with our policy when giving comment and advice on a non-specific basis, we cannot assume legal responsibility for the accuracy of any particular statement. In the case of specific problems we recommend that professional advice be sought.