Legitimate interests guidance version 2

In November 2017, the Data Protection Network, working with the DMA published GDPR guidance on legitimate interests.

The guidance was reviewed by the Information Commissioner's Office (ICO) and so had their tacit approval.

Since then, the legitimate interests assessment outlined in the guidance has been widely adopted by marketers across the UK. Relying on legitimate interests requires carrying out a robust assessment to evidence your decision making process.

Version 2 of the guidance has now been published. This version has several more case studies of practical examples of where legitimate interests would be the valid legal ground. An enhanced legitimate interests assessment has also been included.