“In practice, these changes suggests that under the GDPR we can expect an increased spotlight on controllers ensuring that any decision to process personal data is carefully justified through the carrying out of risk assessments and documented. This is likely to become an essential requirement when the personal data of minors are involved.
So, we are left with the following question…would AG Bobek have adjudged the balance of competing interests test differently under the GDPR? Answers, please, on a postcard…”
I’ve previously written (here) about the concept of legitimate interest under data protection law and how it has captured the attention of data protection agencies, as well as the EU institutions in informing the relevant provisions under the new General Data Protection Regulation (GDPR) to apply from May 2018.
View original post 1,775 more words