2 ms·
> Don’t get hung-up on consent folks, it’s not needed if a business has what’s called a ‘legitimate interest’ – which can be a rather stretchy, elastic term whe
by teddyh 3y ago
> Don’t get hung-up on consent folks, it’s not needed if a business has what’s called a ‘legitimate interest’ – which can be a rather stretchy, elastic term when in the hands of less reputable businesses
Less reputable businesses will simply do whatever they like, but claiming “legitimate interest” means something specific: <https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/a-guide-to-lawful-basis/lawful-basis-for-processing/legitimate-interests/ https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...>
- horsawlarway 3y agoSure, but those guidelines are still "rather stretchy [and] elastic". That doc starts with the line "Legitimate interests is the most flexible lawful basis for processing" and that's the truth.
- ssss11 3y agoIt seems every website thinks they need your PII for legitimate interests though, i wonder how many have actually been taken to court, and actually lost. I bet close to zero, and zero.
- Nextgrid 3y agoThere is no will to actually enforce the GDPR even across the EU. Much stronger cases than auditing vague “legitimate interest” have been stuck in legal limbo for years. UK since Brexit is outright hostile to GDPR - not that they’ve enforced it in the past, but now they want to (and maybe already did) relax their regulation even further.
- dspillett 3y ago> “legitimate interest” means something specific “We see your preference, but fuck you and your preference we want to anyway.”