EDPB’s Guidelines on Legitimate Intesrest
Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest).
Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply appropriately in real life even though it is one of the most commonly used grounds. These Guidelines analyze the criteria set down in Art. 6(1) (f) GDPR that controllers must meet to lawfully process personal data on the basis of legitimate interest. It also takes into consideration the recent ECJ ruling on this matter (C-621/22, 4 October 2024).
The Guidelines will be open to public consultation until 20 November 2024.
Access via link: https://www.linkedin.com/posts/vietnam-data-protection_edpb-guidelines-012024-ver-10-activity-7251417347742179328-XHfJ?utm_source=share&utm_medium=member_desktop
PrivacyCompliance prides itself on its team of experts having achieved numerous internationally recognized certifications such as CIPM, CIPP/E, CISA, CISM, CRISC®, ISO27001 Lead Auditor, etc. With tried-and-tested knowledge and capacity, PrivacyCompliance is confident in being able to provide in-depth and comprehensive solutions on personal data compliance and protection.
CJEU confirms that competitors can sue each other for GDPR infringements
CJEU confirms that competitors can sue each other for GDPR infringements A German pharmacy sued another pharmacy for failing to guarantee explicit consent when processing the health data of the clients as prescribed under GDPR. The German Court held that such activity does amount to unfair and unlawful practice. However, the Court was unsure whether […]
Learn more
Can data subjects be data controllers?
Can data subjects be data controllers? With the rise of AI trained on user data, the question of whether data subjects be considered data controllers for the personal data in their AI prompts and outputs has once again taken the spotlight. This is not a new issue, the possibility of the data subjects acting as […]
Learn more
The draft Personal Data Protection Law has officially been released for public consultation
HOT NEWS The draft Personal Data Protection Law has officially been released for public consultation! The draft Personal Data Protection Law has proposed regulations on the protection of personal data and the responsibilities of relevant agencies, organizations, and individuals in protecting personal data. Additionally, the draft Personal Data Protection Law is expected to apply to: […]
Learn more