Re: Lawfulness of processing

tldr; from Eva' last email regarding adding 'legitimate interest' to the 
vocabulary

On 08/11/18 11:21 AM, Eva Schlehahn wrote:
> I'd suggest just adding 'legitimate interest' as term to the taxonomy to 
> the collection of legal grounds. The controller company then has to take 
> its own additional organisational measures to document why they think 
> this is a valid legal ground for them.

Thanks Eva for the clarification w.r.t using legitimate interest as a 
legal basis for compliance. The most interesting point of all was the 
use of legitimate interest without the data subject's expectation.

 From the discussion then, legitimate interest and consent are mutually 
exclusive, i.e. one cannot describe data as needed for legitimate 
interest AND also request consent over it.
Moving from this point forward, would all legal basis also be mutually 
exclusive, or can they be used in combination with each other?
That is, when providing a taxonomy of legal basis, would the application 
be "select one of these" or "select all applicable"?

Regards,
-- 
---
Harshvardhan J. Pandit
PhD Researcher
ADAPT Centre, Trinity College Dublin
https://harshp.com/

Received on Thursday, 8 November 2018 11:55:33 UTC