With the EU General Data Protection Regulation right around the corner, you have probably heard that there will be six legal bases for processing personal data – consent, performance of a contract, compliance with a legal obligation, vital interests, public interest or official authority, and legitimate interests.
At OneTrust, we have had the pleasure of discussing the topic of legal basis with countless organizations who are currently preparing for GDPR, and from those conversations it is clear that there is a strong focus on – as well as some confusion around – legitimate interests, in particular.
