Source · Select Committees · Human Rights (Joint Committee)
Recommendation 9
9
Paragraph: 42
Article 6 of the GDPR states that there may be legitimate interest for the controller...
Conclusion
Article 6 of the GDPR states that there may be legitimate interest for the controller to process the data without consent where there is a relevant and appropriate relationship between the individual and controller. However, there is not sufficient clarity on how an organisation determines what is in its legitimate interest and how it overrides the individual’s rights.
Paragraph Reference:
42
Government Response
A response document is linked to this report, dated 1 May 2020. Response attribution to this conclusion has not been verified. Read the response document ↗