3 ms·
GDPR is NOT entirely opt-in. For reasons of ‘legitimate interest’ a consent-less collection is warranted (ie. to perform the service). Yes, this does usually ex
by l4u532 7y ago
GDPR is NOT entirely opt-in. For reasons of ‘legitimate interest’ a consent-less collection is warranted (ie. to perform the service). Yes, this does usually excludes data collection for marketing purposes. But it’s important to state that it’s not Entirely opt-in.
- ed 7y agoIf the collection is truly necessary to provide a service, and the consumer has decided (opted in) to use that service, it seems pretty reasonable.
- jdlshore 7y agoHowever, data collected for that "legitimate interest" may only be used for that specific legitimate interest. They can't turn around and use it to end-run the consent requirement. Also, the "legitimate interest" of the business is required to be weighed against the interests of the data subject, so it isn't a blank check.