The European Data Protection Board published supplemental guidance on how and when to apply legitimate interest as a legal basis for processing under the EU General Data Protection Regulation’s legitimate interest principle. The guide offers three core questions a data processor must answer affirmatively for the legitimate interest principle to qualify. Editor’s note: IAPP Editorial Director Jedidiah Bracy reported on the initial release of the EDPB’s draft legitimate interest guidelines.
Full story