Legitimate Interest Assesment

Discussion in 'General Data Protection Regulation (GDPR) Forum' started by Caitlin, Mar 1, 2018.

  1. Caitlin

    Caitlin UKBF Newcomer Free Member

    2 0
    Hi,

    I need to carry out a Legitimate Interest Assesment for my company's B2B marketing activities. Has anyone completed one or have any advice on what this should entail in practice?

    Thanks in advance,

    Caitlin
     
    Posted: Mar 1, 2018 By: Caitlin Member since: Mar 1, 2018
    #1
  2. fisicx

    fisicx It's Major Clanger! Staff Member

    29,332 8,649
    Posted: Mar 1, 2018 By: fisicx Member since: Sep 12, 2006
    #2
  3. Caitlin

    Caitlin UKBF Newcomer Free Member

    2 0
    Hi, thanks for this - the third item is:

    We have conducted a legitimate interests assessment (LIA) and kept a record of it, to ensure that we can justify our decision.

    What form does the assesment need to take? We have assessed and agreed internally but does this just need to be written up:?
     
    Posted: Mar 1, 2018 By: Caitlin Member since: Mar 1, 2018
    #3
  4. fisicx

    fisicx It's Major Clanger! Staff Member

    29,332 8,649
    Yes it does. You need to record why you believe processing is legitimate, why it is necessary and the impact on the recipient. You can use the soft opt-in option for existing customers but you need consent for all new customers. You can't trawl websites for email addresses and call it a legitimate interest.

    You also need a security policy that explains how you are going to keep personal data secure and your processes for removing the data if someone unsubscribes.
     
    Posted: Mar 1, 2018 By: fisicx Member since: Sep 12, 2006
    #4