To rely on Legitimate Interests, you must first carry out a three-stage test, the Legitimate Interests Assessment (LIA) to ensure that there is a balance between the interests of the Controller and the individual. This is an essential part of the concept of Legitimate Interests. The LIA ...
As the DPN points out, a legitimate interest ‘must be real and not too vague’. For example, it may apply to an organisation’s data processing as part of fraud protection, security measures or transferring that data between different parts of an organisational group. Some of this may alrea...
We will hold that it is not in the public interest to assume that satisfying a public interest test in one part of data protection law necessarily entails that it is cleared in all parts. Instead, the public interest requires a contextual assessment of the acceptability of the reasons for ...