EDPB’s Guidelines on Legitimate Intesrest

November 25, 2024

EDPB’s Guidelines on Legitimate Intesrest

Recently, the European Data Protection Board (“EDPB”) adopted Guidelines 01/2024 on processing of personal data based on Article 6(1)(f) GDPR (processing based on legitimate interest).

Legitimate interest is one of the lawful grounds on which personal data can be processed. Its flexible nature makes it quite hard to actually apply appropriately in real life even though it is one of the most commonly used grounds. These Guidelines analyze the criteria set down in Art. 6(1) (f) GDPR that controllers must meet to lawfully process personal data on the basis of legitimate interest. It also takes into consideration the recent ECJ ruling on this matter (C-621/22, 4 October 2024).

The Guidelines will be open to public consultation until 20 November 2024.

Access via link: https://www.linkedin.com/posts/vietnam-data-protection_edpb-guidelines-012024-ver-10-activity-7251417347742179328-XHfJ?utm_source=share&utm_medium=member_desktop


PrivacyCompliance prides itself on its team of experts having achieved numerous internationally recognized certifications such as CIPM, CIPP/E, CISA, CISM, CRISCยฎ, ISO27001 Lead Auditor, etc. With tried-and-tested knowledge and capacity, PrivacyCompliance is confident in being able to provide in-depth and comprehensive solutions on personal data compliance and protection.


Privacy Compliance

Legal Update | Guidance on Submitting Soft Copies of Personal Data Protection Impact Assessment Dossiers

Recently, the Department for Receiving and Returning Administrative Procedure Results on Personal Data Protection issued guidance on the submission of soft copies of the Personal Data Processing Impact Assessment Dossier and/or the Cross-border Personal Data Transfer Impact Assessment Dossier. Under the guidance, organizations and enterprises are required to submit the dossier in a .ZIP compressed […]

Learn more

Privacy Compliance

Draft Decree on Data Exchanges: Proposed Legal Framework for Data Transactions in Vietnam

Draft Decree on Data Exchanges: Proposed Legal Framework for Data Transactions in Vietnam The draft Decree on data exchange operations is currently open for consultation and proposes a framework for organizing, operating, and governing data transactions in Vietnam in a more transparent, controlled, and secure manner. A notable feature of the draft is the proposed […]

Learn more

Privacy Compliance

REDDIT FINED ยฃ14.47 MILLION FOR CHILDRENโ€™S PRIVACY FAILURES โ€” A LANDMARK UK ENFORCEMENT ACTION

๐Ÿ” ๐—ฅ๐—˜๐——๐——๐—œ๐—ง ๐—™๐—œ๐—ก๐—˜๐—— ยฃ14.47 ๐— ๐—œ๐—Ÿ๐—Ÿ๐—œ๐—ข๐—ก ๐—™๐—ข๐—ฅ ๐—–๐—›๐—œ๐—Ÿ๐——๐—ฅ๐—˜๐—กโ€™๐—ฆ ๐—ฃ๐—ฅ๐—œ๐—ฉ๐—”๐—–๐—ฌ ๐—™๐—”๐—œ๐—Ÿ๐—จ๐—ฅ๐—˜๐—ฆ โ€” ๐—” ๐—Ÿ๐—”๐—ก๐——๐— ๐—”๐—ฅ๐—ž ๐—จ๐—ž ๐—˜๐—ก๐—™๐—ข๐—ฅ๐—–๐—˜๐— ๐—˜๐—ก๐—ง ๐—”๐—–๐—ง๐—œ๐—ข๐—ก Recently, the Information Commissioner’s Office (ICO) imposed a fine of approximately ยฃ14.47 million (~USD 19.5 million) on Reddit for processing the personal data of users under 13 without implementing appropriate age verification measures. This is reported to be the largest […]

Learn more