Important. New comprehensive guidance on using “legitimate interest” for data processing under GDPR. Needs a read
You’ll be getting ready for GDPR at the moment, so you’ll need to read this. Legitimate Interest is an alternative to consent under GDPR, but it’s complicated to understand which to use. Luckily the ICO has just published very useful guidance.
The Information Commissioner’s Office has published guidance on relying on “legitimate interest” as a basis for processing data.
If you’re puzzling when you can use “legitimate interest” rather than “consent”, then this guidance goes some way towards making it a lot clearer. Make sure your Data Protection Lead person has a read.
The link above was for the online version, but it also comes as a .pdf here.
See here also for comment on the guidance from the Institute of Fundraising.
On the same subject there is also a guide from the Data Protection Network here that you should be downloading and referring to – “Guidance on the use of Legitimate Interests under the EU GDPR”.