The Paper explains the growing importance of the legitimate interests legal basis for organizations, whether for routine or more complex and innovative data processing activities. It provides recommendations on how this legal basis should be interpreted, used and applied to unlock the value of data in today’s global connected world.
The paper is released in the context of the European Data Protection Board’s update to its 2014 opinion on the legitimate interests, but it is also meant to be relevant for any jurisdiction where data protection law includes legitimate interests as a legal basis for processing personal data, as well as for policymakers in countries looking to adopt a data protection regime.