Processing personal data—legitimate interests—practical examples
Published by a LexisNexis Risk & Compliance expert
Practice notesProcessing personal data—legitimate interests—practical examples
Published by a LexisNexis Risk & Compliance expert
Practice notes
This Practice Note pulls together practical examples of situations where legitimate interests may be considered as the lawful ground for processing. These examples are taken from several sources:
- •
the Information Commissioner's Office (ICO) UK GDPR guidance and resources—Legitimate interests
- •
European Data Protection Board (EDPB) Guidelines 1/2024 on processing of Personal data based on Article 6(1)(f)
- •
WP29 (now EDPB) Opinion on the notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC—this predates the EU General Data Protection Regulation (EU GDPR), but Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) are stated to build on this earlier Opinion
According to the ICO, EDPB guidelines are no longer directly relevant to the UK regime and are not binding under the UK regime. However, they may still provide helpful guidance on certain issues.
Lawful grounds for processing personal data under UK GDPR
You cannot simply process personal data because you wish to do so. You can only process personal data if you satisfy one of the conditions set
Access this content for free with a 7 day trial of LexisNexis and benefit from:
- Instant clarification on points of law
- Smart search
- Workflow tools
- 42 practice areas
Get your quote today and take step closer to being able to benefit from:
- Instant clarification on points of law
- Smart search
- Workflow tools
- 36 practice areas
Get a LexisNexis quote
* denotes a required field
To view the latest version of this document and thousands of others like it,
sign-in with LexisNexis or register for a free trial.
Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Personal data definition
What does Personal data mean?
Personal data means data relating to a living individual who can be identified from such data, either alone or with other information in the data controller’s possession. It includes opinions about, and intentions in relation to the data subject.
CONTACT US
