Data Protection Act 面试题与答案

Question: What is the 'Legitimate Interests' basis for processing personal data, and when can it be used?

Answer: Legitimate interests can be a lawful basis for processing personal data if it is necessary for the legitimate interests pursued by the data controller or a third party, except where overridden by the interests, rights, or freedoms of the data subject.

Example:

A marketing company may rely on legitimate interests to send promotional emails to existing customers.