Updated version of the DPN’s Legitimate Interests Guidance
We have updated the Guidance we originally published in July 2017. This new version (published in April 2018) includes several case studies and an example of a Legitimate Interests Assessment (LIA). We have also added some new short examples and enhanced the LIA template. The main body of the guidance has not been significantly changed.
The Guidance, is a practical tool aimed at helping commercial and not-for-profit organisations to assess whether or not they can rely on Legitimate Interests as a lawful basis for processing personal data under the GDPR.
The Guidance has been made possible by contributions from Bristows LLP, the Direct Marketing Association, ISBA, the IAB, the Institute of Fundrasing, the IPA, Balfour Beatty, Driftrock, Epsilon, Harte Hanks, Member 360 and other representatives of some of the largest companies and institutions in the UK.
The Guidance covers:
- Understanding what Legitimate Interests are
- Identifying areas of processing where Legitimate Interests may apply
- The Legitimate Interests Assessment (LIA) – the 3 stage test
- Transparency and the consumer
The information provided and the opinions expressed in this document represent the views of the Data Protection Network. They do not constitute legal advice and cannot be construed as offering comprehensive guidance on the EU General Data Protection Regulation (GDPR) or other statutory measures referred to.