GDPR Legitimate Interests Assessment (LIA)
The GDPR[1] applies to ‘personal data’ meaning any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. The concept of legitimate interests[2] as a lawful basis for processing is essentially the same as the equivalent Schedule 2 condition in the 1998 Act, with some [...]