Legitimate interest GDPR - Art. 6(1)(f)

Data protection in Germany

Proof of effective consent for direct marketing

The requirements for proof of effective consent for direct marketing are increasingly becoming the focus of data protection supervisory authorities. What is important now and what requirements you

March 31, 2026

ECJ on misuse of requests for information

Data protection in Europe

When is a request for information excessive? ECJ names specific test points

According to the ECJ, an initial request for information can also be „excessive“ within the meaning of Art. 12 (5) GDPR if the controller proves that the request is not

March 19, 2026

This questionnaire systematically guides you through the three-stage exam and explains how to implement it with practical examples.

Article by Aristotelis Zervos

Three-step test for determining legitimate interest: these questions are crucial

This list of questions systematically guides you through the three-stage test and uses practical examples (including direct advertising, video surveillance) to show how a robust balancing of interests can be structured, documented and presented in the

January 8, 2026

Compliance with transparency and information requirements will be the focus of GDPR audits in 2026.

Article by Aristotelis Zervos

GDPR audit priorities for 2026: Transparency and information obligations in the focus of the authorities

The European Data Protection Board's coordinated enforcement action 2026 focuses on the transparency and information obligations under Articles 12, 13, and 14 of the GDPR. What this means in concrete terms for

January 5, 2026

In the event of continued illness, the obligation to continue to pay wages does not apply if the new illness is related to the previous one.

Article by Marcus Belke

Health data in the event of continued illness as a data protection challenge

The data protection assessment of health data in the employment relationship is one of the most sensitive aspects of compliance practice. A current occasion for in-depth discussion is the publication of the

August 7, 2025

Legitimate interests in the development of AI systems: The French data protection supervisory authority CNIL has published guidance on this.

Data protection in Europe

Legitimate interest in the development of AI systems: CNIL guidance

In June 2025, the French data protection supervisory authority CNIL published guidance on the application of the "legitimate interest" (Art. 6 para. 1 lit. f GDPR) as a

June 25, 2025

The EDPB has published a statement on the GDPR-compliant development and use of AI models.

Data protection in Germany

EDPB opinion on the use of personal data in AI models

The European Data Protection Board (EDPB) has published a comprehensive opinion on the data protection-compliant development and use of AI models. The opinion addresses the most important issues in the

February 5, 2025

Consent is required for the use of Google Analytics.

Data protection in Germany

Unauthorized use of Google Analytics: website operators must rectify after inspection

Following a large-scale inspection by the Saxon Data Protection and Transparency Commissioner (SDTB), over 1,500 website operators have improved the data protection requirements on their sites. In particular, the non

November 14, 2024

Article & News

Tag: Berechtigtes Interesse