Skip to Primary Navigation

Skip to main content

GDPR: When can data controllers rely on ‘legitimate interests’ to conduct data processing?

Conductor with baton.
Photo: Robert Essel NYC/Getty Images

Dr. Axel Spies | Morgan Lewis

2 min read
Click to share on Facebook (Opens in new window/tab) Click to share on X (Opens in new window/tab) Click to share on LinkedIn (Opens in new window/tab) Click to share on WhatsApp (Opens in new window/tab)

New guidelines from the EDPB on the processing of personal data.

The European Data Protection Board (EDPB), the umbrella group of the EU’s data protection authorities, issued new Guidelines 01/2024 on October 9, 2024, on the processing of personal data based on the legitimate interest legal basis in the EU’s General Data Protection Regulation (GDPR).

The EDPB guidelines are not legally binding

, , , , ,

Get full access, free for a month

Start your 28-day free trial to continue reading and access
all content on GRIP – no payment details required.

Start free trial Sign in

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience