Legitimate Interests Assessments (LIA) | Data protection ...

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. “A Legitimate Interests Assessment is a useful self-assessment tool which allows you to identify the impact of your processing activity, avoid potential risks associated with unfair data processing, and ensure the lawfulness of the processing.” What is a Legitimate Interests Assessment? And do I need to complete one?

   In Legitimate interest assessment

2. What is a Legitimate Interests Assessment? And do I need to complete one? “An LIA is a fairness test which you would undertake if you are relying on ‘legitimate interests’ as your legal base for processing personal data.” In practice the University are required to have a coherent audit trail of decisions and justifications for processing on the basis of legitimate interests which an LIA would fulfil.  It evidences you have carefully considered the impact on data subjects, and tests if your interests are outweighed by the impact the processing will have on data subject’s data protection rights and interests.   Please see our template (and note that the length of the LIA will depend on the complexity or sensitivity of the data processing activity). If you are using legitimate interest as your legal basis for processing personal data, please contact your Data Co-ordinator in the first instance if you require support to do this.

   In Legitimate interest assessment

3. What is a Legitimate Interests Assessment? And do I need to complete one? “You would need to complete an LIA before you begin data processing activities.” In practice the University are required to have a coherent audit trail of decisions and justifications for processing on the basis of legitimate interests which an LIA would fulfil.  It evidences you have carefully considered the impact on data subjects, and tests if your interests are outweighed by the impact the processing will have on data subject’s data protection rights and interests.   Please see our template (and note that the length of the LIA will depend on the complexity or sensitivity of the data processing activity). If you are using legitimate interest as your legal basis for processing personal data, please contact your Data Co-ordinator in the first instance if you require support to do this.

   In Legitimate interest assessment

4. Three main questions “There are three main questions you need to ask yourself in relation to your data processing activity, which are summarised below.” Show why you are processing personal data, what is the outcome you trying to achieve?

   In Legitimate interest assessment

5. An LIA is a fairness test which you would undertake if you are relying on ‘legitimate interests’ as your legal base for processing personal data. You would need to complete an LIA before you begin data processing activities. “It evidences you have carefully considered the impact on data subjects, and tests if your interests are outweighed by the impact the processing will have on data subject’s data protection rights and interests.” Three main questions

   In Legitimate interest assessment

6. An LIA is a fairness test which you would undertake if you are relying on ‘legitimate interests’ as your legal base for processing personal data. You would need to complete an LIA before you begin data processing activities. “Please see our template (and note that the length of the LIA will depend on the complexity or sensitivity of the data processing activity).” Three main questions

   In Legitimate interest assessment