Press release 12/2024
BfDI welcomes EDPB guidelines on legitimate interest
The Federal Commissioner for Data Protection and Freedom of Information (BfDI), Prof. Dr. Louisa Specht-Riemenschneider, emphasises the importance of the new guidelines of the European Data Protection Board (EDPB) on the so-called legitimate interest:
The definition of 'legitimate interest' has been a cause for discussion since the introduction of the General Data Protection Regulation. Especially for the relationship between industry and private individuals, it is crucial when data may be processed on this basis. It is therefore very good that the European Data Protection Board has presented its guidelines on this subject. I hope that this will provide more legal certainty for citizens, but also for businesses. Prof. Dr. Louisa Specht-Riemenschneider
The guidelines focus on the conditions that controllers must meet if they wish to process personal data in order to ensure legitimate interests. In practice, this legal basis is very important. However, the corresponding article of the General Data Protection Regulation leaves a large margin for interpretation. The EDPB now ensures greater clarity and consistency in this respect.
The guidelines make it clear that data processing on the basis of legitimate interest should not only be considered as a "last resort" for processing projects for which other legal bases do not apply. Nor should the legal basis be overly extended on the grounds that it is supposedly less restrictive than other legal bases.
The EDPB will conduct a public consultation on the guidelines.
The guidelines will soon be available on the EDPB website.