The Guidance prepared by the Data Protection Network is a practical tool aimed at helping commercial and not-for-profit organisations to assess whether or not they can rely on Legitimate Interests as a lawful basis for processing personal data under the GDPR.
The Guidance covers:
- Understanding what Legitimate Interests are
- Identifying areas of processing where Legitimate Interests may apply
- The Legitimate Interests Assessment (LIA) – the 3 stage test
- Transparency and the consumer
https://www.dpnetwork.org.uk/dpn-legitimate-interests-guidance/