GDPRquiz of the week
When can a controller invoke its “legitimate interests” as a valid legal basis under Article 6(1)(f) GDPR?
Only when the processing is necessary for an interest that is expressly determined lawful by European or national law.
Whenever the processing is necessary for an interest pursued by a public authority in the performance of their tasks.
Whenever the controller has informed the data subject accordingly and the data subject agreed to the respective processing.
Only when the processing is necessary for the pursued interest and those interests are not overridden by the data subject’s rights and freedoms.
