EDPB Guidelines on Processing Personal Data Based on Legitimate Interests

Start Date: 09 October 2024 End Date: 20 November 2024 Public consultation reference: 10/2024 Public consultation closed These guidelines analyse the criteria set down in Article 6(1)(f) GDPR that controllers must meet to lawfully engage in the processing of personal data that is “necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

The guidelines also explain the relationship that exists between Article 6(1)(f) GDPR and a number of data subject rights under the GDPR.

Guidelines 1/2024 - Version 1.0 705KB English Download file 1 Summary: legitimate interest, when and how to apply it 351.5KB English Download file 2 Publication Type:
- Guidelines
Topics:
- Legal basis
The European Data Protection Board welcomes comments on the *Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR.*
Such comments should be sent *20th November 2024 at the latest using the provided form.*

Please note that, by submitting your comments, you acknowledge that your comments might be published on the EDPB website.

The EDPB Secretariat staff screens all replies provided before publication (only for the purpose of blocking unauthorised submissions, such as spam), after which the replies are made available to the public directly on the EDPB public consultations’ page. Unauthorised submissions are immediately deleted. The attached files are not altered in any way by the EDPB.

Please, note that regardless the option chosen, your contribution may be subject to a request for access to documents under Regulation 1049/2001 on public access to European Parliament, Council and Commission documents. In this case the request will be assessed against the conditions set out in the Regulation and in accordance with applicable data protection rules.

All legal details can be found in our Specific Privacy Statement (SPS) .