ANALYSIS OF LEGITIMATE INTEREST

HAVE YOU INVOLVED THE LEGITIMATE INTEREST AS A LEGAL BASIS FOR THE PERSONAL DATA PROCESSING FOR VARIOUS PURPOSES (FOR EXAMPLE: VIDEO SURVEILLANCE OR EMPLOYEE LOCATION PROCESSING)?

In this case, did you know that in order to invoke the legitimate interest as the legal basis for processing personal data, it is mandatory to perform and document in advance a comparative test that balances the legitimate interest of the operator with the interest and fundamental rights of the data subject ?

Do you not know how to perform the comparative test of legitimate interest or do you need guidance in the steps you intend to follow? We help you!

Who is it for?

It is addressed both to the experts in the GDPR field, and to the companies that process personal data and want to do it in accordance with the Regulation on Personal Data Protection.

DESCRIPTION CONTENT ANALYSIS OF LEGITIMATE INTEREST

• Establishing the legal basis that can potentially be applied;
• Characterization of an interest as "legitimate" or "illegitimate";
• Establishing the need for processing to achieve the desired interest;
• Establishing a balance sheet by assessing the fundamental rights and interests of data subjects compared to the interest of the data controller, through the spectrum of the following aspects:
• the nature of the legitimate interest;
• processing purposes;
• how to ensure transparency;
• the nature of the data and the way in which they are processed;
• data storage period;
• impact on data subjects;
• reasonable expectations of data subjects about what will happen to their data;
• children's data processing;
• legal purpose limitations;
• Restricting access to data;
• additional safeguards that could limit the unjustified impact on the data subject (such as data minimization);
• Analysis of test conclusions;
• Establishing the final balance, taking into account the taking of additional guarantees;

BENEFITS

• At the organizational level it will help you to demonstrate compliance with the appropriate organizational principles and measures, in accordance with the liability obligations set out in Article 5 (2) and Article 24 of the GDPR;
• You will process personal data in accordance with art. 6, paragraph 2, letter f. Of Regulation (EU) 2016/679;
• You will have documented the analysis of the legitimate interest and thus you will be able to process the personal data invoking it as a legal basis, in accordance with the Data Protection Regulation;
• The analysis of the legitimate interest will also evaluate if it meets the 3 obligatory requirements: to be legal, specific and real;

• The cost of acquiring this analysis is incomparably lower than the minimum fine granted for non-compliance with the regulation, this being 10 million Euros or 2% of the global turnover from the previous year for private organizations and 200,000 Lei for public institutions;
• The analysis is designed by a team of experts:
• GDPR expert with 2 years experience in applying the Regulation, with international certification;

• IT expert with over 15 years in the field, with over 2 years experience in GDPR with expertise in auditing IT systems;
• Human Resources expert with over 10 years of experience in the field and over 1.5 years in GDPR, with DPO certification;

• lawyer with over 2 years experience in the field of GDPR;
• GDPR consultant with over 1.5 years of experience in implementing GDPR compliance at various public and private organizations with over 500 employees, DPO certificate authorized by ANC;