Legitimate interests

Charities over-rely on consent. Legitimate interests is frequently the better basis — and it comes with its own homework.

Using legitimate interests requires a three-part assessment: is there a legitimate interest, is the processing necessary for it, and is it overridden by the individual’s rights and freedoms. The assessment should be recorded before processing begins.

It does not work for everything: electronic marketing has its own rules under PECR. See lawful basis.