The Autoriteit Persoonsgegevens (‘AP‘), the Dutch data protection authority, has been almost alone in claiming that a legitimate interest must be a legal obligation, not just something legal a business…
Article 6 GDPR contains 6 legal bases – easy to remember! Which is good as they’re super important: if you can’t rely on one of them for your processing, it…