The DPN (Data Protection Network) updated guidance includes several case studies and an example of a Legitimate Interests Assessment (LIA).
DPN have also added some new examples and enhanced the LIA template. The main body of the guidance has not been significantly changed.
The Guidance is a practical tool aimed at helping commercial and not-for-profit organisations to assess whether or not they can rely on Legitimate Interests as a lawful basis for processing personal data under the GDPR.
The Guidance received contributions from Bristows LLP, the Direct Marketing Association, ISBA, the IAB, the Institute of Fundraising, the IPA, Balfour Beatty, Driftrock, Epsilon, Harte Hanks, Member 360 and other representatives of some of the largest companies and institutions in the UK.
The Guidance covers:
Understanding what Legitimate Interests are
Identifying areas of processing where Legitimate Interests may apply
The Legitimate Interests Assessment (LIA) – the 3 stage test
Transparency and the consumer