Support our nonpartisan, nonprofit research and insights which help leaders address societal challenges.
Donate

- Authors:
-
Publication Date:
October 2019
The EU General Data Protection Regulation (GDPR) provides that companies may justify processing activities based on their own legitimate interests. This paper explores the concept of legitimate interest and provides guidelines on using legitimate interest as a basis for processing. It addresses the balancing of rights required by GDPR and includes an overview of “reasonably expected processing activities." Published December 2016