Skip to Primary Navigation

GDPR: When can data controllers rely on ‘legitimate interests’ to conduct data processing?

Conductor with baton.
Photo: Robert Essel NYC/Getty Images

New guidelines from the EDPB on the processing of personal data.

The European Data Protection Board (EDPB), the umbrella group of the EU’s data protection authorities, issued new Guidelines 01/2024 on October 9, 2024, on the processing of personal data based on the legitimate interest legal basis in the EU’s General Data Protection Regulation (GDPR).

The EDPB guidelines are not legally binding