Recital 69
EU GDPR

(69) Where personal data might lawfully be processed because processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or on grounds of the legitimate interests of a controller or a third party, a data subject should, nevertheless, be entitled to object to the processing of any personal data relating to his or her particular situation.

It should be for the controller to demonstrate that its compelling legitimate interest overrides the interests or the fundamental rights and freedoms of the data subject.

The DPO Centre is a leading provider of Outsourced Data Protection Officer, EU Representation and Consultancy services. If your organisation needs advice about any aspect of Data Protection or Privacy, then please

 

Contact Us